search

Azure / sql-action

🚀 Deploy changes to your SQL database easily with SQL projects or SQL scripts and sql-action for GitHub workflows
MIT License
103 stars 58 forks source link

[Security] Use role "SQL Server Contributor" instead of "Contributor" #201

Closed FlorentATo closed 6 months ago

FlorentATo commented 11 months ago

In order to update the SQL Server firewall, the identity used to authenticate to Azure (using azure/login) needs to have the following permissions:

Details: https://learn.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftsql

In the spirit of the principle of least privilege, the documentation should be updated to use the role SQL Server Contributor instead of Contributor.

Note: Users looking for further security hardening could also create a custom Azure role with only these two permissions.

dzsquared commented 11 months ago

thank you for the notes and opening the PR, taking a look shortly!

github-actions[bot] commented 11 months ago

This issue is idle because it has been open for 14 days with no activity.

dzsquared commented 6 months ago

PR merged, docs update