🧠 Azure SQL Server Auditing Retention is less than 90 days - prod.logic.yaml 🟢

• Contextual name: 🧠 prod.logic.yaml 🟢
• ID: /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml
• Located in: 📝 Azure SQL Server Auditing Retention is less than 90 days 🟢

Flags

• 🟢 Logic test success
• 🟢 Logic with extracts
• 🟢 Logic with test data

Input Type

	Type	API Name	Extracts	Extract Files	Logic Files
🔒	📕 Azure SQL Server	CA10__CaAzureSqlServer__c	9	1	6

Uses

• 🔌 Azure SQL Server - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2025-04-24T23:45:47.778491699Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10__auditing__c') == 'Disabled'	✔️ null
🟢	test3	✔️ 299	✔️ extract('CA10__auditingRetentionDays__c') < number(90.0) && extract('CA10__auditingRetentionDays__c') > number(0.0)	✔️ null
🟢	test4	✔️ 399	✔️ extract('CA10__auditingRetentionDays__c') >= number(90.0)	✔️ null
🟢	test5	✔️ 499	✔️ extract('CA10__auditingRetentionDays__c') == number(0.0)	✔️ null
🟢	test6	✔️ 101	✔️ CA10__auditing__c.delegatedTo(CA10__auditing__c).isEmpty()	✔️ null

Generation

	File	MD5
Open	/ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/policy.yaml	BE9BE65706327F3FF9B0458E1F9AC8ED
Open	/ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml	9710ECB8D088E6D968BFEE6872444CDD
Open	/ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/test-data.json	1633EEA3B5D89E5888050400080BFD71
Open	/types/CA10__CaAzureSqlServer__c/object.extracts.yaml	E77808BBEDF31D54E009EEA59AC5EF4B

Generate FULL script

java -jar repo-manager.jar policies generate FULL /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml

Generate DEBUG script

java -jar repo-manager.jar policies generate DEBUG /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml

Generate CAPTURE_TEST_DATA script

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml

Generate TESTS script

java -jar repo-manager.jar policies generate TESTS /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml

Execute tests

java -jar repo-manager.jar policies test /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAzureSqlServer__c"
testData:
  - file: "test-data.json"
importExtracts:
  - file: "/types/CA10__CaAzureSqlServer__c/object.extracts.yaml"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "SQL Server auditing is disabled."
    remediationMessage: "Consider enabling SQL Server auditing."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__auditing__c"
        right:
          TEXT: "Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "SQL Server auditing retention is less than 90 days."
    remediationMessage: "Consider setting SQL Server auditing retention to be greater than 90 days or 0 for unlimited retention."
    check:
      AND:
        args:
          - LESS_THAN:
              left: 
                EXTRACT: "CA10__auditingRetentionDays__c"
              right:
                NUMBER: 90.0
          - GREATER_THAN:
              left: 
                EXTRACT: "CA10__auditingRetentionDays__c"
              right:
                NUMBER: 0.0
  - status: "COMPLIANT"
    currentStateMessage: "SQL Server auditing retention is 90 days or more."
    check:
      GREATER_THAN_EQUAL:
        left: 
          EXTRACT: "CA10__auditingRetentionDays__c"
        right:
          NUMBER: 90.0
  - status: "COMPLIANT"
    currentStateMessage: "SQL Server auditing retention is unlimited."
    check:
      IS_EQUAL:
        left: 
          EXTRACT: "CA10__auditingRetentionDays__c"
        right:
          NUMBER: 0.0
otherwise:
  status: "UNDETERMINED"
  currentStateMessage: "Unexpected value in the field."