azure-native.dbforpostgresql.ServerSecurityAlertPolicy
Explore with Pulumi AI
A server security alert policy. API Version: 2017-12-01.
Example Usage
Update a server's threat detection policy with all parameters
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var serverSecurityAlertPolicy = new AzureNative.DBforPostgreSQL.ServerSecurityAlertPolicy("serverSecurityAlertPolicy", new()
    {
        DisabledAlerts = new[]
        {
            "Access_Anomaly",
            "Usage_Anomaly",
        },
        EmailAccountAdmins = true,
        EmailAddresses = new[]
        {
            "testSecurityAlert@microsoft.com",
        },
        ResourceGroupName = "securityalert-4799",
        RetentionDays = 5,
        SecurityAlertPolicyName = "Default",
        ServerName = "securityalert-6440",
        State = AzureNative.DBforPostgreSQL.ServerSecurityAlertPolicyState.Enabled,
        StorageAccountAccessKey = "sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==",
        StorageEndpoint = "https://mystorage.blob.core.windows.net",
    });
});
package main
import (
	dbforpostgresql "github.com/pulumi/pulumi-azure-native-sdk/dbforpostgresql"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := dbforpostgresql.NewServerSecurityAlertPolicy(ctx, "serverSecurityAlertPolicy", &dbforpostgresql.ServerSecurityAlertPolicyArgs{
			DisabledAlerts: pulumi.StringArray{
				pulumi.String("Access_Anomaly"),
				pulumi.String("Usage_Anomaly"),
			},
			EmailAccountAdmins: pulumi.Bool(true),
			EmailAddresses: pulumi.StringArray{
				pulumi.String("testSecurityAlert@microsoft.com"),
			},
			ResourceGroupName:       pulumi.String("securityalert-4799"),
			RetentionDays:           pulumi.Int(5),
			SecurityAlertPolicyName: pulumi.String("Default"),
			ServerName:              pulumi.String("securityalert-6440"),
			State:                   dbforpostgresql.ServerSecurityAlertPolicyStateEnabled,
			StorageAccountAccessKey: pulumi.String("sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD=="),
			StorageEndpoint:         pulumi.String("https://mystorage.blob.core.windows.net"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.dbforpostgresql.ServerSecurityAlertPolicy;
import com.pulumi.azurenative.dbforpostgresql.ServerSecurityAlertPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var serverSecurityAlertPolicy = new ServerSecurityAlertPolicy("serverSecurityAlertPolicy", ServerSecurityAlertPolicyArgs.builder()        
            .disabledAlerts(            
                "Access_Anomaly",
                "Usage_Anomaly")
            .emailAccountAdmins(true)
            .emailAddresses("testSecurityAlert@microsoft.com")
            .resourceGroupName("securityalert-4799")
            .retentionDays(5)
            .securityAlertPolicyName("Default")
            .serverName("securityalert-6440")
            .state("Enabled")
            .storageAccountAccessKey("sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==")
            .storageEndpoint("https://mystorage.blob.core.windows.net")
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const serverSecurityAlertPolicy = new azure_native.dbforpostgresql.ServerSecurityAlertPolicy("serverSecurityAlertPolicy", {
    disabledAlerts: [
        "Access_Anomaly",
        "Usage_Anomaly",
    ],
    emailAccountAdmins: true,
    emailAddresses: ["testSecurityAlert@microsoft.com"],
    resourceGroupName: "securityalert-4799",
    retentionDays: 5,
    securityAlertPolicyName: "Default",
    serverName: "securityalert-6440",
    state: azure_native.dbforpostgresql.ServerSecurityAlertPolicyState.Enabled,
    storageAccountAccessKey: "sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==",
    storageEndpoint: "https://mystorage.blob.core.windows.net",
});
import pulumi
import pulumi_azure_native as azure_native
server_security_alert_policy = azure_native.dbforpostgresql.ServerSecurityAlertPolicy("serverSecurityAlertPolicy",
    disabled_alerts=[
        "Access_Anomaly",
        "Usage_Anomaly",
    ],
    email_account_admins=True,
    email_addresses=["testSecurityAlert@microsoft.com"],
    resource_group_name="securityalert-4799",
    retention_days=5,
    security_alert_policy_name="Default",
    server_name="securityalert-6440",
    state=azure_native.dbforpostgresql.ServerSecurityAlertPolicyState.ENABLED,
    storage_account_access_key="sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==",
    storage_endpoint="https://mystorage.blob.core.windows.net")
resources:
  serverSecurityAlertPolicy:
    type: azure-native:dbforpostgresql:ServerSecurityAlertPolicy
    properties:
      disabledAlerts:
        - Access_Anomaly
        - Usage_Anomaly
      emailAccountAdmins: true
      emailAddresses:
        - testSecurityAlert@microsoft.com
      resourceGroupName: securityalert-4799
      retentionDays: 5
      securityAlertPolicyName: Default
      serverName: securityalert-6440
      state: Enabled
      storageAccountAccessKey: sdlfkjabc+sdlfkjsdlkfsjdfLDKFTERLKFDFKLjsdfksjdflsdkfD2342309432849328476458/3RSD==
      storageEndpoint: https://mystorage.blob.core.windows.net
Update a server's threat detection policy with minimal parameters
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var serverSecurityAlertPolicy = new AzureNative.DBforPostgreSQL.ServerSecurityAlertPolicy("serverSecurityAlertPolicy", new()
    {
        EmailAccountAdmins = true,
        ResourceGroupName = "securityalert-4799",
        SecurityAlertPolicyName = "Default",
        ServerName = "securityalert-6440",
        State = AzureNative.DBforPostgreSQL.ServerSecurityAlertPolicyState.Disabled,
    });
});
package main
import (
	dbforpostgresql "github.com/pulumi/pulumi-azure-native-sdk/dbforpostgresql"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := dbforpostgresql.NewServerSecurityAlertPolicy(ctx, "serverSecurityAlertPolicy", &dbforpostgresql.ServerSecurityAlertPolicyArgs{
			EmailAccountAdmins:      pulumi.Bool(true),
			ResourceGroupName:       pulumi.String("securityalert-4799"),
			SecurityAlertPolicyName: pulumi.String("Default"),
			ServerName:              pulumi.String("securityalert-6440"),
			State:                   dbforpostgresql.ServerSecurityAlertPolicyStateDisabled,
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.dbforpostgresql.ServerSecurityAlertPolicy;
import com.pulumi.azurenative.dbforpostgresql.ServerSecurityAlertPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var serverSecurityAlertPolicy = new ServerSecurityAlertPolicy("serverSecurityAlertPolicy", ServerSecurityAlertPolicyArgs.builder()        
            .emailAccountAdmins(true)
            .resourceGroupName("securityalert-4799")
            .securityAlertPolicyName("Default")
            .serverName("securityalert-6440")
            .state("Disabled")
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const serverSecurityAlertPolicy = new azure_native.dbforpostgresql.ServerSecurityAlertPolicy("serverSecurityAlertPolicy", {
    emailAccountAdmins: true,
    resourceGroupName: "securityalert-4799",
    securityAlertPolicyName: "Default",
    serverName: "securityalert-6440",
    state: azure_native.dbforpostgresql.ServerSecurityAlertPolicyState.Disabled,
});
import pulumi
import pulumi_azure_native as azure_native
server_security_alert_policy = azure_native.dbforpostgresql.ServerSecurityAlertPolicy("serverSecurityAlertPolicy",
    email_account_admins=True,
    resource_group_name="securityalert-4799",
    security_alert_policy_name="Default",
    server_name="securityalert-6440",
    state=azure_native.dbforpostgresql.ServerSecurityAlertPolicyState.DISABLED)
resources:
  serverSecurityAlertPolicy:
    type: azure-native:dbforpostgresql:ServerSecurityAlertPolicy
    properties:
      emailAccountAdmins: true
      resourceGroupName: securityalert-4799
      securityAlertPolicyName: Default
      serverName: securityalert-6440
      state: Disabled
Create ServerSecurityAlertPolicy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ServerSecurityAlertPolicy(name: string, args: ServerSecurityAlertPolicyArgs, opts?: CustomResourceOptions);@overload
def ServerSecurityAlertPolicy(resource_name: str,
                              args: ServerSecurityAlertPolicyArgs,
                              opts: Optional[ResourceOptions] = None)
@overload
def ServerSecurityAlertPolicy(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              resource_group_name: Optional[str] = None,
                              server_name: Optional[str] = None,
                              state: Optional[ServerSecurityAlertPolicyState] = None,
                              disabled_alerts: Optional[Sequence[str]] = None,
                              email_account_admins: Optional[bool] = None,
                              email_addresses: Optional[Sequence[str]] = None,
                              retention_days: Optional[int] = None,
                              security_alert_policy_name: Optional[str] = None,
                              storage_account_access_key: Optional[str] = None,
                              storage_endpoint: Optional[str] = None)func NewServerSecurityAlertPolicy(ctx *Context, name string, args ServerSecurityAlertPolicyArgs, opts ...ResourceOption) (*ServerSecurityAlertPolicy, error)public ServerSecurityAlertPolicy(string name, ServerSecurityAlertPolicyArgs args, CustomResourceOptions? opts = null)
public ServerSecurityAlertPolicy(String name, ServerSecurityAlertPolicyArgs args)
public ServerSecurityAlertPolicy(String name, ServerSecurityAlertPolicyArgs args, CustomResourceOptions options)
type: azure-native:dbforpostgresql:ServerSecurityAlertPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ServerSecurityAlertPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ServerSecurityAlertPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ServerSecurityAlertPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ServerSecurityAlertPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ServerSecurityAlertPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var serverSecurityAlertPolicyResource = new AzureNative.Dbforpostgresql.ServerSecurityAlertPolicy("serverSecurityAlertPolicyResource", new()
{
    ResourceGroupName = "string",
    ServerName = "string",
    State = "Enabled",
    DisabledAlerts = new[]
    {
        "string",
    },
    EmailAccountAdmins = false,
    EmailAddresses = new[]
    {
        "string",
    },
    RetentionDays = 0,
    SecurityAlertPolicyName = "string",
    StorageAccountAccessKey = "string",
    StorageEndpoint = "string",
});
example, err := dbforpostgresql.NewServerSecurityAlertPolicy(ctx, "serverSecurityAlertPolicyResource", &dbforpostgresql.ServerSecurityAlertPolicyArgs{
	ResourceGroupName: "string",
	ServerName:        "string",
	State:             "Enabled",
	DisabledAlerts: []string{
		"string",
	},
	EmailAccountAdmins: false,
	EmailAddresses: []string{
		"string",
	},
	RetentionDays:           0,
	SecurityAlertPolicyName: "string",
	StorageAccountAccessKey: "string",
	StorageEndpoint:         "string",
})
var serverSecurityAlertPolicyResource = new ServerSecurityAlertPolicy("serverSecurityAlertPolicyResource", ServerSecurityAlertPolicyArgs.builder()
    .resourceGroupName("string")
    .serverName("string")
    .state("Enabled")
    .disabledAlerts("string")
    .emailAccountAdmins(false)
    .emailAddresses("string")
    .retentionDays(0)
    .securityAlertPolicyName("string")
    .storageAccountAccessKey("string")
    .storageEndpoint("string")
    .build());
server_security_alert_policy_resource = azure_native.dbforpostgresql.ServerSecurityAlertPolicy("serverSecurityAlertPolicyResource",
    resource_group_name=string,
    server_name=string,
    state=Enabled,
    disabled_alerts=[string],
    email_account_admins=False,
    email_addresses=[string],
    retention_days=0,
    security_alert_policy_name=string,
    storage_account_access_key=string,
    storage_endpoint=string)
const serverSecurityAlertPolicyResource = new azure_native.dbforpostgresql.ServerSecurityAlertPolicy("serverSecurityAlertPolicyResource", {
    resourceGroupName: "string",
    serverName: "string",
    state: "Enabled",
    disabledAlerts: ["string"],
    emailAccountAdmins: false,
    emailAddresses: ["string"],
    retentionDays: 0,
    securityAlertPolicyName: "string",
    storageAccountAccessKey: "string",
    storageEndpoint: "string",
});
type: azure-native:dbforpostgresql:ServerSecurityAlertPolicy
properties:
    disabledAlerts:
        - string
    emailAccountAdmins: false
    emailAddresses:
        - string
    resourceGroupName: string
    retentionDays: 0
    securityAlertPolicyName: string
    serverName: string
    state: Enabled
    storageAccountAccessKey: string
    storageEndpoint: string
ServerSecurityAlertPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ServerSecurityAlertPolicy resource accepts the following input properties:
- ResourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- ServerName string
- The name of the server.
- State
Pulumi.Azure Native. DBfor Postgre SQL. Server Security Alert Policy State 
- Specifies the state of the policy, whether it is enabled or disabled.
- DisabledAlerts List<string>
- Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly
- EmailAccount boolAdmins 
- Specifies that the alert is sent to the account administrators.
- EmailAddresses List<string>
- Specifies an array of e-mail addresses to which the alert is sent.
- RetentionDays int
- Specifies the number of days to keep in the Threat Detection audit logs.
- SecurityAlert stringPolicy Name 
- The name of the threat detection policy.
- StorageAccount stringAccess Key 
- Specifies the identifier key of the Threat Detection audit storage account.
- StorageEndpoint string
- Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
- ResourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- ServerName string
- The name of the server.
- State
ServerSecurity Alert Policy State Enum 
- Specifies the state of the policy, whether it is enabled or disabled.
- DisabledAlerts []string
- Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly
- EmailAccount boolAdmins 
- Specifies that the alert is sent to the account administrators.
- EmailAddresses []string
- Specifies an array of e-mail addresses to which the alert is sent.
- RetentionDays int
- Specifies the number of days to keep in the Threat Detection audit logs.
- SecurityAlert stringPolicy Name 
- The name of the threat detection policy.
- StorageAccount stringAccess Key 
- Specifies the identifier key of the Threat Detection audit storage account.
- StorageEndpoint string
- Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
- resourceGroup StringName 
- The name of the resource group. The name is case insensitive.
- serverName String
- The name of the server.
- state
ServerSecurity Alert Policy State 
- Specifies the state of the policy, whether it is enabled or disabled.
- disabledAlerts List<String>
- Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly
- emailAccount BooleanAdmins 
- Specifies that the alert is sent to the account administrators.
- emailAddresses List<String>
- Specifies an array of e-mail addresses to which the alert is sent.
- retentionDays Integer
- Specifies the number of days to keep in the Threat Detection audit logs.
- securityAlert StringPolicy Name 
- The name of the threat detection policy.
- storageAccount StringAccess Key 
- Specifies the identifier key of the Threat Detection audit storage account.
- storageEndpoint String
- Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
- resourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- serverName string
- The name of the server.
- state
ServerSecurity Alert Policy State 
- Specifies the state of the policy, whether it is enabled or disabled.
- disabledAlerts string[]
- Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly
- emailAccount booleanAdmins 
- Specifies that the alert is sent to the account administrators.
- emailAddresses string[]
- Specifies an array of e-mail addresses to which the alert is sent.
- retentionDays number
- Specifies the number of days to keep in the Threat Detection audit logs.
- securityAlert stringPolicy Name 
- The name of the threat detection policy.
- storageAccount stringAccess Key 
- Specifies the identifier key of the Threat Detection audit storage account.
- storageEndpoint string
- Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
- resource_group_ strname 
- The name of the resource group. The name is case insensitive.
- server_name str
- The name of the server.
- state
ServerSecurity Alert Policy State 
- Specifies the state of the policy, whether it is enabled or disabled.
- disabled_alerts Sequence[str]
- Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly
- email_account_ booladmins 
- Specifies that the alert is sent to the account administrators.
- email_addresses Sequence[str]
- Specifies an array of e-mail addresses to which the alert is sent.
- retention_days int
- Specifies the number of days to keep in the Threat Detection audit logs.
- security_alert_ strpolicy_ name 
- The name of the threat detection policy.
- storage_account_ straccess_ key 
- Specifies the identifier key of the Threat Detection audit storage account.
- storage_endpoint str
- Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
- resourceGroup StringName 
- The name of the resource group. The name is case insensitive.
- serverName String
- The name of the server.
- state "Enabled" | "Disabled"
- Specifies the state of the policy, whether it is enabled or disabled.
- disabledAlerts List<String>
- Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly
- emailAccount BooleanAdmins 
- Specifies that the alert is sent to the account administrators.
- emailAddresses List<String>
- Specifies an array of e-mail addresses to which the alert is sent.
- retentionDays Number
- Specifies the number of days to keep in the Threat Detection audit logs.
- securityAlert StringPolicy Name 
- The name of the threat detection policy.
- storageAccount StringAccess Key 
- Specifies the identifier key of the Threat Detection audit storage account.
- storageEndpoint String
- Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
Outputs
All input properties are implicitly available as output properties. Additionally, the ServerSecurityAlertPolicy resource produces the following output properties:
Supporting Types
ServerSecurityAlertPolicyState, ServerSecurityAlertPolicyStateArgs          
- Enabled
- Enabled
- Disabled
- Disabled
- ServerSecurity Alert Policy State Enabled 
- Enabled
- ServerSecurity Alert Policy State Disabled 
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- ENABLED
- Enabled
- DISABLED
- Disabled
- "Enabled"
- Enabled
- "Disabled"
- Disabled
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:dbforpostgresql:ServerSecurityAlertPolicy Default /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/securityalert-4799/providers/Microsoft.DBforPostgreSQL/servers/securityalert-6440/securityAlertPolicies/default 
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- azure-native-v1 pulumi/pulumi-azure-native
- License
- Apache-2.0