🧠 Azure SQL Server Auditing Retention is less than 90 days - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 Azure SQL Server
• 🔌 Azure SQL Server - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2026-02-10T22:33:36.809170810Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10__auditing__c') == 'Disabled'	✔️ null
🟢	test3	✔️ 299	✔️ extract('CA10__auditingRetentionDays__c') < number(90.0) && extract('CA10__auditingRetentionDays__c') > number(0.0)	✔️ null
🟢	test4	✔️ 399	✔️ extract('CA10__auditingRetentionDays__c') >= number(90.0)	✔️ null
🟢	test5	✔️ 499	✔️ extract('CA10__auditingRetentionDays__c') == number(0.0)	✔️ null
🟢	test6	✔️ 101	✔️ CA10__auditing__c.delegatedTo(CA10__auditing__c).isEmpty()	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/policy.yaml	BE9BE65706327F3FF9B0458E1F9AC8ED
Open	/ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml	685E8DA0FDAFC9DABAFD9F53F7D9296B
Open	/ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/test-data.json	1633EEA3B5D89E5888050400080BFD71
Open	/types/CA10__CaAzureSqlServer__c/object.extracts.yaml	C096245468858A9F41067AD8FA5D8D0E

Available Commands

repo-manager policies generate FULL /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/azure/sql-database/server-auditing-retention-90-days-or-more/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAzureSqlServer__c"
testData:
  - file: "test-data.json"
importExtracts:
  - file: "/types/CA10__CaAzureSqlServer__c/object.extracts.yaml"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "SQL Server auditing is disabled."
    remediationMessage: "Enable SQL Server auditing."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__auditing__c"
        right:
          TEXT: "Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "SQL Server auditing retention is less than 90 days."
    remediationMessage: "Set auditing retention to more than 90 days or to 0 for unlimited retention."
    check:
      AND:
        args:
          - LESS_THAN:
              left: 
                EXTRACT: "CA10__auditingRetentionDays__c"
              right:
                NUMBER: 90.0
          - GREATER_THAN:
              left: 
                EXTRACT: "CA10__auditingRetentionDays__c"
              right:
                NUMBER: 0.0
  - status: "COMPLIANT"
    currentStateMessage: "SQL Server auditing retention is 90 days or more."
    check:
      GREATER_THAN_EQUAL:
        left: 
          EXTRACT: "CA10__auditingRetentionDays__c"
        right:
          NUMBER: 90.0
  - status: "COMPLIANT"
    currentStateMessage: "SQL Server auditing retention is unlimited."
    check:
      IS_EQUAL:
        left: 
          EXTRACT: "CA10__auditingRetentionDays__c"
        right:
          NUMBER: 0.0
otherwise:
  status: "UNDETERMINED"
  currentStateMessage: "Unexpected value in the field."