ServerThreatDetectionPolicy

data class ServerThreatDetectionPolicy(val disabledAlerts: List<String>? = null, val emailAccountAdmins: Boolean? = null, val emailAddresses: List<String>? = null, val enabled: Boolean? = null, val retentionDays: Int? = null, val storageAccountAccessKey: String? = null, val storageEndpoint: String? = null)

Constructors

Link copied to clipboard
constructor(disabledAlerts: List<String>? = null, emailAccountAdmins: Boolean? = null, emailAddresses: List<String>? = null, enabled: Boolean? = null, retentionDays: Int? = null, storageAccountAccessKey: String? = null, storageEndpoint: String? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard
val disabledAlerts: List<String>? = null

Specifies a list of alerts which should be disabled. Possible values are Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration and Unsafe_Action.

Link copied to clipboard

Should the account administrators be emailed when this alert is triggered?

Link copied to clipboard
val emailAddresses: List<String>? = null

A list of email addresses which alerts should be sent to.

Link copied to clipboard
val enabled: Boolean? = null

Is the policy enabled?

Link copied to clipboard
val retentionDays: Int? = null

Specifies the number of days to keep in the Threat Detection audit logs.

Link copied to clipboard

Specifies the identifier key of the Threat Detection audit storage account.

Link copied to clipboard
val storageEndpoint: String? = null

Specifies the blob storage endpoint (e.g. https://example.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.