search

Azure-Samples / azuresandbox

Stand up an Azure sandbox environment for accelerating your projects in an hour.
MIT License
67 stars 33 forks source link

VA2021- SQL Logins with commonly used names should be disabled (mssqlwin1) #64

Closed doherty100 closed 3 months ago

doherty100 commented 3 months ago

Please provide us with the following information:

This issue is for a: (mark with an x)

- [ ] bug report -> please search issues before submitting
- [ X ] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

Deploy terraform-azurerm-vm-mssql Enable SQL servers on machines defender plan

Any log messages given by the failure

VA2201 - SQL logins with commonly used names should be disabled

Expected/desired behavior

This should be remediated as per "Secure by Default" This should also address VA1058 - sa login should be disabled This should also address VA1072 - Authentication mode should be Windows Authentication

OS and Version?

Windows Server 2022 / SQL Server 2022

Versions

AzureSandbox v2.11.2

Mention any other details that might be useful

sa is enabled during bootstrapping, should be disabled once bootstrapping is complete