---
inputType: "CA10__CaAzureSqlServer__c"
testData:
  - file: "test-data.json"
importExtracts:
  - file: "/types/CA10__CaAzureSqlServer__c/object.extracts.yaml"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "SQL Server auditing is disabled."
    remediationMessage: "Enable SQL Server auditing."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__auditing__c"
        right:
          TEXT: "Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "SQL Server auditing retention is less than 90 days."
    remediationMessage: "Set auditing retention to more than 90 days or to 0 for unlimited retention."
    check:
      AND:
        args:
          - LESS_THAN:
              left: 
                EXTRACT: "CA10__auditingRetentionDays__c"
              right:
                NUMBER: 90.0
          - GREATER_THAN:
              left: 
                EXTRACT: "CA10__auditingRetentionDays__c"
              right:
                NUMBER: 0.0
  - status: "COMPLIANT"
    currentStateMessage: "SQL Server auditing retention is 90 days or more."
    check:
      GREATER_THAN_EQUAL:
        left: 
          EXTRACT: "CA10__auditingRetentionDays__c"
        right:
          NUMBER: 90.0
  - status: "COMPLIANT"
    currentStateMessage: "SQL Server auditing retention is unlimited."
    check:
      IS_EQUAL:
        left: 
          EXTRACT: "CA10__auditingRetentionDays__c"
        right:
          NUMBER: 0.0
otherwise:
  status: "UNDETERMINED"
  currentStateMessage: "Unexpected value in the field."