Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. sql
  5. DatabaseSecurityAlertPolicy
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.5.0 published on Monday, May 19, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.sql.DatabaseSecurityAlertPolicy

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.5.0 published on Monday, May 19, 2025 by Pulumi
pulumi/pulumi-azure-native

    A database security alert policy.

    Uses Azure REST API version 2023-08-01. In version 2.x of the Azure Native provider, it used API version 2021-11-01.

    Other available API versions: 2018-06-01-preview, 2020-02-02-preview, 2020-08-01-preview, 2020-11-01-preview, 2021-02-01-preview, 2021-05-01-preview, 2021-08-01-preview, 2021-11-01, 2021-11-01-preview, 2022-02-01-preview, 2022-05-01-preview, 2022-08-01-preview, 2022-11-01-preview, 2023-02-01-preview, 2023-05-01-preview, 2023-08-01-preview, 2024-05-01-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native sql [ApiVersion]. See the version guide for details.

    Example Usage

    Update a database's threat detection policy with all parameters

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var databaseSecurityAlertPolicy = new AzureNative.Sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy", new()
    {
        DatabaseName = "testdb",
        DisabledAlerts = new[]
        {
            "Sql_Injection",
            "Usage_Anomaly",
        },
        EmailAccountAdmins = true,
        EmailAddresses = new[]
        {
            "test@microsoft.com",
            "user@microsoft.com",
        },
        ResourceGroupName = "securityalert-4799",
        RetentionDays = 6,
        SecurityAlertPolicyName = "default",
        ServerName = "securityalert-6440",
        State = AzureNative.Sql.SecurityAlertsPolicyState.Enabled,
        StorageAccountAccessKey = "sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==",
        StorageEndpoint = "https://mystorage.blob.core.windows.net",
    });

});

    package main

import (
	sql "github.com/pulumi/pulumi-azure-native-sdk/sql/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sql.NewDatabaseSecurityAlertPolicy(ctx, "databaseSecurityAlertPolicy", &sql.DatabaseSecurityAlertPolicyArgs{
			DatabaseName: pulumi.String("testdb"),
			DisabledAlerts: pulumi.StringArray{
				pulumi.String("Sql_Injection"),
				pulumi.String("Usage_Anomaly"),
			},
			EmailAccountAdmins: pulumi.Bool(true),
			EmailAddresses: pulumi.StringArray{
				pulumi.String("test@microsoft.com"),
				pulumi.String("user@microsoft.com"),
			},
			ResourceGroupName:       pulumi.String("securityalert-4799"),
			RetentionDays:           pulumi.Int(6),
			SecurityAlertPolicyName: pulumi.String("default"),
			ServerName:              pulumi.String("securityalert-6440"),
			State:                   sql.SecurityAlertsPolicyStateEnabled,
			StorageAccountAccessKey: pulumi.String("sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD=="),
			StorageEndpoint:         pulumi.String("https://mystorage.blob.core.windows.net"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.sql.DatabaseSecurityAlertPolicy;
import com.pulumi.azurenative.sql.DatabaseSecurityAlertPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var databaseSecurityAlertPolicy = new DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy", DatabaseSecurityAlertPolicyArgs.builder()
            .databaseName("testdb")
            .disabledAlerts(            
                "Sql_Injection",
                "Usage_Anomaly")
            .emailAccountAdmins(true)
            .emailAddresses(            
                "test@microsoft.com",
                "user@microsoft.com")
            .resourceGroupName("securityalert-4799")
            .retentionDays(6)
            .securityAlertPolicyName("default")
            .serverName("securityalert-6440")
            .state("Enabled")
            .storageAccountAccessKey("sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==")
            .storageEndpoint("https://mystorage.blob.core.windows.net")
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const databaseSecurityAlertPolicy = new azure_native.sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy", {
    databaseName: "testdb",
    disabledAlerts: [
        "Sql_Injection",
        "Usage_Anomaly",
    ],
    emailAccountAdmins: true,
    emailAddresses: [
        "test@microsoft.com",
        "user@microsoft.com",
    ],
    resourceGroupName: "securityalert-4799",
    retentionDays: 6,
    securityAlertPolicyName: "default",
    serverName: "securityalert-6440",
    state: azure_native.sql.SecurityAlertsPolicyState.Enabled,
    storageAccountAccessKey: "sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==",
    storageEndpoint: "https://mystorage.blob.core.windows.net",
});

    import pulumi
import pulumi_azure_native as azure_native

database_security_alert_policy = azure_native.sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy",
    database_name="testdb",
    disabled_alerts=[
        "Sql_Injection",
        "Usage_Anomaly",
    ],
    email_account_admins=True,
    email_addresses=[
        "test@microsoft.com",
        "user@microsoft.com",
    ],
    resource_group_name="securityalert-4799",
    retention_days=6,
    security_alert_policy_name="default",
    server_name="securityalert-6440",
    state=azure_native.sql.SecurityAlertsPolicyState.ENABLED,
    storage_account_access_key="sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==",
    storage_endpoint="https://mystorage.blob.core.windows.net")

    resources:
  databaseSecurityAlertPolicy:
    type: azure-native:sql:DatabaseSecurityAlertPolicy
    properties:
      databaseName: testdb
      disabledAlerts:
        - Sql_Injection
        - Usage_Anomaly
      emailAccountAdmins: true
      emailAddresses:
        - test@microsoft.com
        - user@microsoft.com
      resourceGroupName: securityalert-4799
      retentionDays: 6
      securityAlertPolicyName: default
      serverName: securityalert-6440
      state: Enabled
      storageAccountAccessKey: sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==
      storageEndpoint: https://mystorage.blob.core.windows.net

    Update a database's threat detection policy with minimal parameters

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var databaseSecurityAlertPolicy = new AzureNative.Sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy", new()
    {
        DatabaseName = "testdb",
        ResourceGroupName = "securityalert-4799",
        SecurityAlertPolicyName = "default",
        ServerName = "securityalert-6440",
        State = AzureNative.Sql.SecurityAlertsPolicyState.Enabled,
    });

});

    package main

import (
	sql "github.com/pulumi/pulumi-azure-native-sdk/sql/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sql.NewDatabaseSecurityAlertPolicy(ctx, "databaseSecurityAlertPolicy", &sql.DatabaseSecurityAlertPolicyArgs{
			DatabaseName:            pulumi.String("testdb"),
			ResourceGroupName:       pulumi.String("securityalert-4799"),
			SecurityAlertPolicyName: pulumi.String("default"),
			ServerName:              pulumi.String("securityalert-6440"),
			State:                   sql.SecurityAlertsPolicyStateEnabled,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.sql.DatabaseSecurityAlertPolicy;
import com.pulumi.azurenative.sql.DatabaseSecurityAlertPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var databaseSecurityAlertPolicy = new DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy", DatabaseSecurityAlertPolicyArgs.builder()
            .databaseName("testdb")
            .resourceGroupName("securityalert-4799")
            .securityAlertPolicyName("default")
            .serverName("securityalert-6440")
            .state("Enabled")
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const databaseSecurityAlertPolicy = new azure_native.sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy", {
    databaseName: "testdb",
    resourceGroupName: "securityalert-4799",
    securityAlertPolicyName: "default",
    serverName: "securityalert-6440",
    state: azure_native.sql.SecurityAlertsPolicyState.Enabled,
});

    import pulumi
import pulumi_azure_native as azure_native

database_security_alert_policy = azure_native.sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicy",
    database_name="testdb",
    resource_group_name="securityalert-4799",
    security_alert_policy_name="default",
    server_name="securityalert-6440",
    state=azure_native.sql.SecurityAlertsPolicyState.ENABLED)

    resources:
  databaseSecurityAlertPolicy:
    type: azure-native:sql:DatabaseSecurityAlertPolicy
    properties:
      databaseName: testdb
      resourceGroupName: securityalert-4799
      securityAlertPolicyName: default
      serverName: securityalert-6440
      state: Enabled

    Create DatabaseSecurityAlertPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DatabaseSecurityAlertPolicy(name: string, args: DatabaseSecurityAlertPolicyArgs, opts?: CustomResourceOptions);
    @overload
def DatabaseSecurityAlertPolicy(resource_name: str,
                                args: DatabaseSecurityAlertPolicyArgs,
                                opts: Optional[ResourceOptions] = None)

@overload
def DatabaseSecurityAlertPolicy(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                database_name: Optional[str] = None,
                                resource_group_name: Optional[str] = None,
                                server_name: Optional[str] = None,
                                state: Optional[SecurityAlertsPolicyState] = None,
                                disabled_alerts: Optional[Sequence[str]] = None,
                                email_account_admins: Optional[bool] = None,
                                email_addresses: Optional[Sequence[str]] = None,
                                retention_days: Optional[int] = None,
                                security_alert_policy_name: Optional[str] = None,
                                storage_account_access_key: Optional[str] = None,
                                storage_endpoint: Optional[str] = None)
    func NewDatabaseSecurityAlertPolicy(ctx *Context, name string, args DatabaseSecurityAlertPolicyArgs, opts ...ResourceOption) (*DatabaseSecurityAlertPolicy, error)
    public DatabaseSecurityAlertPolicy(string name, DatabaseSecurityAlertPolicyArgs args, CustomResourceOptions? opts = null)
    public DatabaseSecurityAlertPolicy(String name, DatabaseSecurityAlertPolicyArgs args)
public DatabaseSecurityAlertPolicy(String name, DatabaseSecurityAlertPolicyArgs args, CustomResourceOptions options)

    type: azure-native:sql:DatabaseSecurityAlertPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DatabaseSecurityAlertPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DatabaseSecurityAlertPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DatabaseSecurityAlertPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DatabaseSecurityAlertPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DatabaseSecurityAlertPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var databaseSecurityAlertPolicyResource = new AzureNative.Sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicyResource", new()
{
    DatabaseName = "string",
    ResourceGroupName = "string",
    ServerName = "string",
    State = AzureNative.Sql.SecurityAlertsPolicyState.Enabled,
    DisabledAlerts = new[]
    {
        "string",
    },
    EmailAccountAdmins = false,
    EmailAddresses = new[]
    {
        "string",
    },
    RetentionDays = 0,
    SecurityAlertPolicyName = "string",
    StorageAccountAccessKey = "string",
    StorageEndpoint = "string",
});

    example, err := sql.NewDatabaseSecurityAlertPolicy(ctx, "databaseSecurityAlertPolicyResource", &sql.DatabaseSecurityAlertPolicyArgs{
	DatabaseName:      pulumi.String("string"),
	ResourceGroupName: pulumi.String("string"),
	ServerName:        pulumi.String("string"),
	State:             sql.SecurityAlertsPolicyStateEnabled,
	DisabledAlerts: pulumi.StringArray{
		pulumi.String("string"),
	},
	EmailAccountAdmins: pulumi.Bool(false),
	EmailAddresses: pulumi.StringArray{
		pulumi.String("string"),
	},
	RetentionDays:           pulumi.Int(0),
	SecurityAlertPolicyName: pulumi.String("string"),
	StorageAccountAccessKey: pulumi.String("string"),
	StorageEndpoint:         pulumi.String("string"),
})

    var databaseSecurityAlertPolicyResource = new DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicyResource", DatabaseSecurityAlertPolicyArgs.builder()
    .databaseName("string")
    .resourceGroupName("string")
    .serverName("string")
    .state("Enabled")
    .disabledAlerts("string")
    .emailAccountAdmins(false)
    .emailAddresses("string")
    .retentionDays(0)
    .securityAlertPolicyName("string")
    .storageAccountAccessKey("string")
    .storageEndpoint("string")
    .build());

    database_security_alert_policy_resource = azure_native.sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicyResource",
    database_name="string",
    resource_group_name="string",
    server_name="string",
    state=azure_native.sql.SecurityAlertsPolicyState.ENABLED,
    disabled_alerts=["string"],
    email_account_admins=False,
    email_addresses=["string"],
    retention_days=0,
    security_alert_policy_name="string",
    storage_account_access_key="string",
    storage_endpoint="string")

    const databaseSecurityAlertPolicyResource = new azure_native.sql.DatabaseSecurityAlertPolicy("databaseSecurityAlertPolicyResource", {
    databaseName: "string",
    resourceGroupName: "string",
    serverName: "string",
    state: azure_native.sql.SecurityAlertsPolicyState.Enabled,
    disabledAlerts: ["string"],
    emailAccountAdmins: false,
    emailAddresses: ["string"],
    retentionDays: 0,
    securityAlertPolicyName: "string",
    storageAccountAccessKey: "string",
    storageEndpoint: "string",
});

    type: azure-native:sql:DatabaseSecurityAlertPolicy
properties:
    databaseName: string
    disabledAlerts:
        - string
    emailAccountAdmins: false
    emailAddresses:
        - string
    resourceGroupName: string
    retentionDays: 0
    securityAlertPolicyName: string
    serverName: string
    state: Enabled
    storageAccountAccessKey: string
    storageEndpoint: string

    DatabaseSecurityAlertPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DatabaseSecurityAlertPolicy resource accepts the following input properties:

    DatabaseName string
    The name of the database for which the security alert policy is defined.
    ResourceGroupName string
    The name of the resource group that contains the resource. You can obtain this value from the Azure Resource Manager API or the portal.
    ServerName string
    The name of the server.
    State Pulumi.AzureNative.Sql.SecurityAlertsPolicyState
    Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database.
    DisabledAlerts List<string>
    Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action, Brute_Force
    EmailAccountAdmins bool
    Specifies that the alert is sent to the account administrators.
    EmailAddresses List<string>
    Specifies an array of e-mail addresses to which the alert is sent.
    RetentionDays int
    Specifies the number of days to keep in the Threat Detection audit logs.
    SecurityAlertPolicyName string
    The name of the security alert policy.
    StorageAccountAccessKey string
    Specifies the identifier key of the Threat Detection audit storage account.
    StorageEndpoint string
    Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
    DatabaseName string
    The name of the database for which the security alert policy is defined.
    ResourceGroupName string
    The name of the resource group that contains the resource. You can obtain this value from the Azure Resource Manager API or the portal.
    ServerName string
    The name of the server.
    State SecurityAlertsPolicyState
    Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database.
    DisabledAlerts []string
    Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action, Brute_Force
    EmailAccountAdmins bool
    Specifies that the alert is sent to the account administrators.
    EmailAddresses []string
    Specifies an array of e-mail addresses to which the alert is sent.
    RetentionDays int
    Specifies the number of days to keep in the Threat Detection audit logs.
    SecurityAlertPolicyName string
    The name of the security alert policy.
    StorageAccountAccessKey string
    Specifies the identifier key of the Threat Detection audit storage account.
    StorageEndpoint string
    Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
    databaseName String
    The name of the database for which the security alert policy is defined.
    resourceGroupName String
    The name of the resource group that contains the resource. You can obtain this value from the Azure Resource Manager API or the portal.
    serverName String
    The name of the server.
    state SecurityAlertsPolicyState
    Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database.
    disabledAlerts List<String>
    Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action, Brute_Force
    emailAccountAdmins Boolean
    Specifies that the alert is sent to the account administrators.
    emailAddresses List<String>
    Specifies an array of e-mail addresses to which the alert is sent.
    retentionDays Integer
    Specifies the number of days to keep in the Threat Detection audit logs.
    securityAlertPolicyName String
    The name of the security alert policy.
    storageAccountAccessKey String
    Specifies the identifier key of the Threat Detection audit storage account.
    storageEndpoint String
    Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
    databaseName string
    The name of the database for which the security alert policy is defined.
    resourceGroupName string
    The name of the resource group that contains the resource. You can obtain this value from the Azure Resource Manager API or the portal.
    serverName string
    The name of the server.
    state SecurityAlertsPolicyState
    Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database.
    disabledAlerts string[]
    Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action, Brute_Force
    emailAccountAdmins boolean
    Specifies that the alert is sent to the account administrators.
    emailAddresses string[]
    Specifies an array of e-mail addresses to which the alert is sent.
    retentionDays number
    Specifies the number of days to keep in the Threat Detection audit logs.
    securityAlertPolicyName string
    The name of the security alert policy.
    storageAccountAccessKey string
    Specifies the identifier key of the Threat Detection audit storage account.
    storageEndpoint string
    Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
    database_name str
    The name of the database for which the security alert policy is defined.
    resource_group_name str
    The name of the resource group that contains the resource. You can obtain this value from the Azure Resource Manager API or the portal.
    server_name str
    The name of the server.
    state SecurityAlertsPolicyState
    Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database.
    disabled_alerts Sequence[str]
    Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action, Brute_Force
    email_account_admins bool
    Specifies that the alert is sent to the account administrators.
    email_addresses Sequence[str]
    Specifies an array of e-mail addresses to which the alert is sent.
    retention_days int
    Specifies the number of days to keep in the Threat Detection audit logs.
    security_alert_policy_name str
    The name of the security alert policy.
    storage_account_access_key str
    Specifies the identifier key of the Threat Detection audit storage account.
    storage_endpoint str
    Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
    databaseName String
    The name of the database for which the security alert policy is defined.
    resourceGroupName String
    The name of the resource group that contains the resource. You can obtain this value from the Azure Resource Manager API or the portal.
    serverName String
    The name of the server.
    state "Enabled" | "Disabled"
    Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database.
    disabledAlerts List<String>
    Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action, Brute_Force
    emailAccountAdmins Boolean
    Specifies that the alert is sent to the account administrators.
    emailAddresses List<String>
    Specifies an array of e-mail addresses to which the alert is sent.
    retentionDays Number
    Specifies the number of days to keep in the Threat Detection audit logs.
    securityAlertPolicyName String
    The name of the security alert policy.
    storageAccountAccessKey String
    Specifies the identifier key of the Threat Detection audit storage account.
    storageEndpoint String
    Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DatabaseSecurityAlertPolicy resource produces the following output properties:

    AzureApiVersion string
    The Azure API version of the resource.
    CreationTime string
    Specifies the UTC creation time of the policy.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    SystemData Pulumi.AzureNative.Sql.Outputs.SystemDataResponse
    SystemData of SecurityAlertPolicyResource.
    Type string
    Resource type.
    AzureApiVersion string
    The Azure API version of the resource.
    CreationTime string
    Specifies the UTC creation time of the policy.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    SystemData SystemDataResponse
    SystemData of SecurityAlertPolicyResource.
    Type string
    Resource type.
    azureApiVersion String
    The Azure API version of the resource.
    creationTime String
    Specifies the UTC creation time of the policy.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    systemData SystemDataResponse
    SystemData of SecurityAlertPolicyResource.
    type String
    Resource type.
    azureApiVersion string
    The Azure API version of the resource.
    creationTime string
    Specifies the UTC creation time of the policy.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Resource name.
    systemData SystemDataResponse
    SystemData of SecurityAlertPolicyResource.
    type string
    Resource type.
    azure_api_version str
    The Azure API version of the resource.
    creation_time str
    Specifies the UTC creation time of the policy.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Resource name.
    system_data SystemDataResponse
    SystemData of SecurityAlertPolicyResource.
    type str
    Resource type.
    azureApiVersion String
    The Azure API version of the resource.
    creationTime String
    Specifies the UTC creation time of the policy.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    systemData Property Map
    SystemData of SecurityAlertPolicyResource.
    type String
    Resource type.

    Supporting Types

    SecurityAlertsPolicyState, SecurityAlertsPolicyStateArgs

    Enabled
    Enabled
    Disabled
    Disabled
    SecurityAlertsPolicyStateEnabled
    Enabled
    SecurityAlertsPolicyStateDisabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    ENABLED
    Enabled
    DISABLED
    Disabled
    "Enabled"
    Enabled
    "Disabled"
    Disabled

    SystemDataResponse, SystemDataResponseArgs

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:sql:DatabaseSecurityAlertPolicy default /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Sql/servers/{serverName}/databases/{databaseName}/securityAlertPolicies/{securityAlertPolicyName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Azure Native v3.5.0 published on Monday, May 19, 2025 by Pulumi
    pulumi/pulumi-azure-native