Powershell Set-AzureRmSqlDatabaseVulnerabilityAssessmentRuleBaseline RUle VA1288 - Data Classification

John Couch 181

Does anyone know how to force existing results to baseline? I have tried using the below configurations, but it doesn't work. I have tried passing TRUE, FALSE...e.tc. as values, doesn't work.

$ResourceGroup = ""
$Server = ""
$Database = ""

$Values = @('schemaname' ),@('tablename' ),@('columnname' )
Set-AzureRmSqlDatabaseVulnerabilityAssessmentRuleBaseline -ResourceGroupName $ResourceGroup -ServerName $Server -DatabaseName $Database -RuleId "VA1288" -BaselineResult $Values

Saurabh Sharma 23,801 Reputation points Microsoft Employee

2022-01-07T20:48:47.787+00:00

Hi @John Couch ,

Thanks for using Microsoft Q&A !!

Have you executed the prerequisite cmdlets - Enable-AzureRmSqlServerAdvancedThreatProtection and Set-AzureRmSqlDatabaseVulnerabilityAssessmentSettings before using Set-AzureRmSqlDatabaseVulnerabilityAssessmentRuleBaseline. You can refer to the Set-AzureRmSqlDatabaseVulnerabilityAssessmentRuleBaseline documentation for details.

Also, it is recommended to use Az Module instead of Azure RM, so please can you try with Set-AzureRmSqlDatabaseVulnerabilityAssessmentRuleBaseline if that works for you.

Please let me know if you have any questions.

Thanks
Saurabh
John Couch 181 Reputation points

2022-01-07T21:25:47.393+00:00

Yes, and I have several other baseline code executions using the same format above that work fine. The data classification baseline however does not and I can only assume its because of the schema, table column formatting???

1 answer

John Couch 181 Reputation points

2022-01-13T15:40:26.077+00:00

After reaching out to Microsoft, it turns out the solution is. He said it was looking for a True or False value and it applies to all of the classifications currently.

$ResourceGroup = ""
$Server = ""
$Database = ""

$Values = @('1' )
Set-AzureRmSqlDatabaseVulnerabilityAssessmentRuleBaseline -ResourceGroupName $ResourceGroup -ServerName $Server -DatabaseName $Database -RuleId "VA1288" -BaselineResult $Values
Please sign in to rate this answer.
Saurabh Sharma 23,801 Reputation points Microsoft Employee

2022-01-14T01:25:25.037+00:00

@John Couch Thanks for sharing your solution. This will definitely help other community members.
Please feel free to accept your answer.

Thanks
Saurabh

John Couch 181 Reputation points

2022-01-14T01:27:44.383+00:00

I can't accept my own answer. It won't let me.

Saurabh Sharma 23,801 Reputation points Microsoft Employee

2022-02-02T19:37:25.047+00:00

@John Couch ok. I got to know internally that it is expected behavior as of now where you cannot accept your own answer.

Thanks
Saurabh

John Couch 181 Reputation points

2022-02-02T23:07:55.347+00:00

I really appreciate that you did follow through and follow up on this thread. Just wanted to say thanks for that.

I wish there was more of an explanation on expected baseline format for each rule. The fact that '1' works on that rule, where it does not on any others that I have had to do since is a bit frustrating.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Powershell Set-AzureRmSqlDatabaseVulnerabilityAssessmentRuleBaseline RUle VA1288 - Data Classification

1 answer

Your answer