Skip to main content

sql_vulnerability_assessment_scan_results

Creates, updates, deletes, gets or lists a sql_vulnerability_assessment_scan_results resource.

Overview

Namesql_vulnerability_assessment_scan_results
TypeResource
Idazure.security.sql_vulnerability_assessment_scan_results

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstringFully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
namestringThe name of the resource.
baselineAdjustedResultobjectThe rule result adjusted with baseline.
isTrimmedbooleanIndicates whether the results specified here are trimmed.
queryResultsarrayThe results of the query that was run.
remediationobjectRemediation details.
ruleIdstringThe rule Id.
ruleMetadataobjectvulnerability assessment rule metadata details.
statusstringThe rule result status. Known values are: "NonFinding", "Finding", "InternalError", and "NotApplicable". (NonFinding, Finding, InternalError, NotApplicable)
systemDataobjectAzure Resource Manager metadata containing createdBy and modifiedBy information.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectscan_id, scan_result_id, resource_iddatabaseNameGets the scan results of a single rule in a scan record. Gets the scan results of a single rule in a scan record.
listselectscan_id, resource_iddatabaseNameGets a list of scan results for a single scan record. Gets a list of scan results for a single scan record.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
resource_idstringThe fully qualified Azure Resource manager identifier of the resource. Required.
scan_idstringThe scan Id. Required.
scan_result_idstringThe rule Id of the results. Required.
databaseNamestringThe name of the database to assess. Required when the API is called on the parent resource (e.g., server level) rather than on a specific database resource, since the database name is not part of the resource URI. This is the only way to assess system databases (e.g., master), which cannot be referenced directly in the resource URI. Default value is None.

SELECT examples

Gets the scan results of a single rule in a scan record. Gets the scan results of a single rule in a scan record.

SELECT
id,
name,
baselineAdjustedResult,
isTrimmed,
queryResults,
remediation,
ruleId,
ruleMetadata,
status,
systemData,
type
FROM azure.security.sql_vulnerability_assessment_scan_results
WHERE scan_id = '{{ scan_id }}' -- required
AND scan_result_id = '{{ scan_result_id }}' -- required
AND resource_id = '{{ resource_id }}' -- required
AND databaseName = '{{ databaseName }}'
;