Configure audit logs on an Azure Database for MySQL - Flexible Server using Azure CLI
This sample CLI script enables audit logs on an Azure Database for MySQL - Flexible Server.
If you don't have an Azure subscription, create an Azure free account before you begin. With an Azure free account, you can now try Azure Database for MySQL - Flexible Server for free for 12 months. For more information, see Try Flexible Server for free.
If you prefer to run CLI reference commands locally, install the Azure CLI. If you're running on Windows or macOS, consider running Azure CLI in a Docker container. For more information, see How to run the Azure CLI in a Docker container.
If you're using a local installation, sign in to the Azure CLI by using the az login command. To finish the authentication process, follow the steps displayed in your terminal. For other sign-in options, see Sign in with the Azure CLI.
When you're prompted, install the Azure CLI extension on first use. For more information about extensions, see Use extensions with the Azure CLI.
- This article requires version 2.0 or later of the Azure CLI. If using Azure Cloud Shell, the latest version is already installed.
Launch Azure Cloud Shell
The Azure Cloud Shell is a free interactive shell that you can use to run the steps in this article. It has common Azure tools preinstalled and configured to use with your account.
To open the Cloud Shell, just select Try it from the upper right corner of a code block. You can also launch Cloud Shell in a separate browser tab by going to https://shell.azure.com.
When Cloud Shell opens, verify that Bash is selected for your environment. Subsequent sessions will use Azure CLI in a Bash environment, Select Copy to copy the blocks of code, paste it into the Cloud Shell, and press Enter to run it.
Sign in to Azure
Cloud Shell is automatically authenticated under the initial account signed-in with. Use the following script to sign in using a different subscription, replacing
<Subscription ID> with your Azure Subscription ID. If you don't have an Azure subscription, create an Azure free account before you begin.
subscription="<subscriptionId>" # add subscription here az account set -s $subscription # ...or use 'az login'
Run the script
# Configure audit logs on Azure Database for MySQL - Flexible Server # Variable block let "randomIdentifier=$RANDOM*$RANDOM" location="East US" resourceGroup="msdocs-mysql-rg-$randomIdentifier" tag="configure-audit-logs-mysql" server="msdocs-mysql-server-$randomIdentifier" login="azureuser" password="Pa$$w0rD-$randomIdentifier" ipAddress="None" # Specifying an IP address of 0.0.0.0 allows public access from any resources # deployed within Azure to access your server. Setting it to "None" sets the server # in public access mode but does not create a firewall rule. # For your public IP address, https://whatismyipaddress.com echo "Using resource group $resourceGroup with login: $login, password: $password..." # Create a resource group echo "Creating $resourceGroup in $location..." az group create --name $resourceGroup --location "$location" --tags $tag # Create a MySQL Flexible server in the resource group echo "Creating $server" az mysql flexible-server create --name $server --resource-group $resourceGroup --location "$location" --admin-user $login --admin-password $password --public-access $ipAddress # Optional: Add firewall rule to connect from all Azure services # To limit to a specific IP address or address range, change start-ip-address and end-ip-address echo "Adding firewall for IP address range" az mysql flexible-server firewall-rule create --name $server --resource-group $resourceGroup --rule-name AllowAzureIPs --start-ip-address 0.0.0.0 --end-ip-address 0.0.0.0 # Enable audit logs echo "Enabling audit logs" az mysql flexible-server parameter set --resource-group $resourceGroup --server-name $server --name audit_log_enabled --value ON
Clean up resources
Use the following command to remove the resource group and all resources associated with it using the az group delete command - unless you have an ongoing need for these resources. Some of these resources may take a while to create, as well as to delete.
az group delete --name $resourceGroup
This script uses the following commands. Each command in the table links to command specific documentation.
|az group create||Creates a resource group in which all resources are stored|
|az mysql flexible-server create||Creates a Flexible Server that hosts the databases.|
|az mysql flexible-server parameter set||Updates the parameter of a flexible server.|
|az mysql flexible-server delete||Deletes a Flexible Server.|
|az group delete||Deletes a resource group including all nested resources.|
- Try additional scripts: Azure CLI samples for Azure Database for MySQL - Flexible Server
- For more information on the Azure CLI, see Azure CLI documentation.