ServerDevOpsAuditingSettings Class
A server DevOps auditing settings.
Variables are only populated by the server, and will be ignored when sending a request.
Constructor
ServerDevOpsAuditingSettings(*, is_azure_monitor_target_enabled: bool | None = None, is_managed_identity_in_use: bool | None = None, state: str | _models.BlobAuditingPolicyState | None = None, storage_endpoint: str | None = None, storage_account_access_key: str | None = None, storage_account_subscription_id: str | None = None, **kwargs: Any)
Keyword-Only Parameters
| Name | Description |
|---|---|
|
is_azure_monitor_target_enabled
|
Specifies whether DevOps audit events are sent to Azure Monitor. In order to send the events to Azure Monitor, specify 'State' as 'Enabled' and 'IsAzureMonitorTargetEnabled' as true. When using REST API to configure DevOps audit, Diagnostic Settings with 'DevOpsOperationsAudit' diagnostic logs category on the master database should be also created. Diagnostic Settings URI format: PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Sql/servers/{serverName}/databases/master/providers/microsoft.insights/diagnosticSettings/{settingsName}?api-version=2017-05-01-preview For more information, see Diagnostic Settings REST API or Diagnostic Settings PowerShell. Default value: None
|
|
is_managed_identity_in_use
|
Specifies whether Managed Identity is used to access blob storage. Default value: None
|
|
state
|
Specifies the state of the audit. If state is Enabled, storageEndpoint or isAzureMonitorTargetEnabled are required. Known values are: "Enabled" and "Disabled". Default value: None
|
|
storage_endpoint
|
Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). If state is Enabled, storageEndpoint or isAzureMonitorTargetEnabled is required. Default value: None
|
|
storage_account_access_key
|
Specifies the identifier key of the auditing storage account. If state is Enabled and storageEndpoint is specified, not specifying the storageAccountAccessKey will use SQL server system-assigned managed identity to access the storage. Prerequisites for using managed identity authentication:
#. Grant SQL Server identity access to the storage account by adding 'Storage Blob Data Contributor' RBAC role to the server identity. For more information, see >>`<<Auditing to storage using Managed Identity authentication Default value: None
|
|
storage_account_subscription_id
|
Specifies the blob storage subscription Id. Default value: None
|
Variables
| Name | Description |
|---|---|
|
id
|
Resource ID. |
|
name
|
Resource name. |
|
type
|
Resource type. |
|
system_data
|
SystemData of ServerDevOpsAuditSettingsResource. |
|
is_azure_monitor_target_enabled
|
Specifies whether DevOps audit events are sent to Azure Monitor. In order to send the events to Azure Monitor, specify 'State' as 'Enabled' and 'IsAzureMonitorTargetEnabled' as true. When using REST API to configure DevOps audit, Diagnostic Settings with 'DevOpsOperationsAudit' diagnostic logs category on the master database should be also created. Diagnostic Settings URI format: PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Sql/servers/{serverName}/databases/master/providers/microsoft.insights/diagnosticSettings/{settingsName}?api-version=2017-05-01-preview For more information, see Diagnostic Settings REST API or Diagnostic Settings PowerShell. |
|
is_managed_identity_in_use
|
Specifies whether Managed Identity is used to access blob storage. |
|
state
|
Specifies the state of the audit. If state is Enabled, storageEndpoint or isAzureMonitorTargetEnabled are required. Known values are: "Enabled" and "Disabled". |
|
storage_endpoint
|
Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). If state is Enabled, storageEndpoint or isAzureMonitorTargetEnabled is required. |
|
storage_account_access_key
|
Specifies the identifier key of the auditing storage account. If state is Enabled and storageEndpoint is specified, not specifying the storageAccountAccessKey will use SQL server system-assigned managed identity to access the storage. Prerequisites for using managed identity authentication:
#. Grant SQL Server identity access to the storage account by adding 'Storage Blob Data Contributor' RBAC role to the server identity. For more information, see >>`<<Auditing to storage using Managed Identity authentication |
|
storage_account_subscription_id
|
Specifies the blob storage subscription Id. |