Updated SQL policies and removed management (#265)

Azure · Jun 20, 2023 · 54bef3c · 54bef3c
1 parent c868df0
commit 54bef3c
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 39 deletions.
diff --git a/Scripts/CloudAdoptionFramework/policyAssignments/CAF-LandingZonesMG.json b/Scripts/CloudAdoptionFramework/policyAssignments/CAF-LandingZonesMG.json
@@ -274,6 +274,23 @@
                         }
                     ]
                 },
+                {
+                    "nodeName": "SQLTDE",
+                    "assignment": {
+                        "name": "Deploy-SQL-TDE",
+                        "displayName": "Deploy TDE on SQL servers",
+                        "description": "This policy ensures that Transparent Data Encryption is enabled on SQL Servers."
+                    },
+                    "definitionEntry": {
+                        "policyId": "/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f",
+                        "friendlyNameToDocumentIfGuid": "Deploy SQL TDE"
+                    },
+                    "nonComplianceMessages": [
+                        {
+                            "message": "TDE must be deployed on SQL servers."
+                        }
+                    ]
+                },
                 {
                     "nodeName": "ACSB",
                     "assignment": {

diff --git a/Scripts/CloudAdoptionFramework/policyAssignments/CAF-ManagementMG-Default.json b/Scripts/CloudAdoptionFramework/policyAssignments/CAF-ManagementMG-Default.json