Take an action when an Azure SQL Virtual Machine Service sql virtual machine is not active based on the
`Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Active &gt; * policies`.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it&#39;s common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (`Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Active &gt; *`),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

**Note:** In contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See [Active](https://turbot.com/v5/docs/concepts/guardrails/active) for more information.


Azure > SQL Virtual Machine Service > SQL Virtual Machine

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Active

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Active > Age

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Active > Last Modified

Take an action when an Azure SQL Virtual Machine Service sql virtual machine is not approved based on `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Approved &gt; * policies`.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.

See [Approved](https://turbot.com/v5/docs/concepts/guardrails/approved) for more information.


Azure > SQL Virtual Machine Service > SQL Virtual Machine > Approved

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Approved > Custom

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Approved > Regions

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Approved > Usage

Record and synchronize details for the Azure SQL Virtual Machine Service sql virtual machine into the CMDB.

The [CMDB](https://turbot.com/v5/docs/concepts/guardrails/cmdb) control is
responsible for populating and updating all the attributes for that
resource type in the Turbot CMDB.

**Note:** If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

CMDB controls also use the Regions policy associated with the resource. If
region is not in `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Regions` policy, the CMDB control will delete the
resource from the CMDB.


Azure > SQL Virtual Machine Service > SQL Virtual Machine > CMDB

Discover all Azure SQL Virtual Machine Service sql virtual machine resources and add them to the CMDB.

The [Discovery](https://turbot.com/v5/docs/concepts/guardrails/discovery) control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the [CMDB](https://turbot.com/v5/docs/concepts/guardrails/cmdb) control.

**Note:** Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Regions` policy, the CMDB control will delete the resource from the CMDB.


Azure > Resource Group

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Discovery

Take an action when an Azure SQL Virtual Machine Service sql virtual machine tags is not updated based on the `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Tags &gt; *` policies.

If the resource is not updated with the tags defined in `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Tags &gt; Template`, this control raises an alarm and takes the defined enforcement action.

See [Tags](https://turbot.com/v5/docs/concepts/guardrails/tagging) for more information.


Azure > SQL Virtual Machine Service > SQL Virtual Machine > Tags

Azure > SQL Virtual Machine Service > SQL Virtual Machine > Tags > Template

test-nd

sqlVirtualMachine

sqlVirtualMachineAka

sqlVirtualMachineId

sqlVirtualMachineName

sqlVirtualMachineService

sqlVirtualMachineServiceAka

azure-sqlvirtualmachine

A calculated policy that Turbot uses to create a compiled list of ALL
permissions for Azure SQL Virtual Machine Service that is used as input to the control that manages
the IAM stack.


Azure > Turbot > Permissions > Compiled > Service Permissions

Azure > Subscription

Azure > Turbot > Permissions > Compiled > Service Permissions > @turbot/azure-sqlvirtualmachine

A calculated policy that Turbot uses to create a compiled list of ALL
permission levels for Azure SQL Virtual Machine Service that is used as input to the
stack that manages the Turbot IAM permissions objects.


Azure > Turbot > Permissions > Compiled > Levels

Azure > Turbot > Permissions > Compiled > Levels > @turbot/azure-sqlvirtualmachine

Determine the action to take when an Azure SQL Virtual Machine Service sql virtual machine, based on the `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Active &gt; *` policies.

The control determines whether the resource is in active use, and if not,
has the ability to delete / cleanup the resource. When running an automated
compliance environment, it&#39;s common to end up with a wide range of alarms
that are difficult and time consuming to clear. The Active control brings
automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the
resource (`Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Active &gt; *`), raises an alarm, and takes the defined enforcement
action. Each Active sub-policy can calculate a status of active, inactive
or skipped. Generally, if the resource appears to be Active for any reason
it will be considered Active.

**Note:** In contrast with Approved, where if the
resource appears to be Unapproved for any reason it will be considered
Unapproved.

See [Active](https://turbot.com/v5/docs/concepts/guardrails/active) for more information.


The age after which the Azure SQL Virtual Machine Service sql virtual machine
is no longer considered active. If a create time is unavailable, the time Turbot discovered the resource is used.

The [Active](https://turbot.com/v5/docs/concepts/guardrails/active)
control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated
compliance environment, it&#39;s common to end up with a wide range of alarms
that are difficult and time consuming to clear. The Active control brings
automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the
resource (`Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Active &gt; *`),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

**Note** In contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See [Active](https://turbot.com/v5/docs/concepts/guardrails/active) for more information.


The number of days since the Azure SQL Virtual Machine Service sql virtual machine was last modified before it is considered
inactive.

The [Active](https://turbot.com/v5/docs/concepts/guardrails/active)
control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated
compliance environment, it&#39;s common to end up with a wide range of alarms
that are difficult and time consuming to clear. The Active control brings
automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the
resource (`Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Active &gt; *`), raises an alarm, and takes the defined enforcement
action. Each Active sub-policy can calculate a status of active, inactive
or skipped. Generally, if the resource appears to be Active for any reason
it will be considered Active.

**Note** In contrast with Approved, where if the
resource appears to be Unapproved for any reason it will be considered
Unapproved.


Determine the action to take when an Azure SQL Virtual Machine Service sql virtual machine is not approved based on `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Approved &gt; *` policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.

See [Approved](https://turbot.com/v5/docs/concepts/guardrails/approved) for more information.


Determine whether the Azure SQL Virtual Machine Service sql virtual machine is allowed to exist.
This policy will be evaluated by the Approved control. If an Azure SQL Virtual Machine Service sql virtual machine is not approved, it will be subject to the action specified in the `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Approved` policy.
See [Approved](https://turbot.com/v5/docs/concepts/guardrails/approved) for more information.

**Note**: The policy value must be a string with a value of `Approved`, `Not approved` or `Skip`, or in the form of YAML objects. The object(s) must contain the key `result` with its value as `Approved` or `Not approved`. A custom title and message can also be added using the keys `title` and `message` respectively.


string

A list of Azure regions in which Azure SQL Virtual Machine Service sql virtual machines are approved for use.

The expected format is an array of regions names. You may use the &#39;*&#39; and &#39;?&#39; wildcard characters.

This policy will be evaluated by the Approved control. If an Azure SQL Virtual Machine Service sql virtual machine is created in a region that is not in the approved list, it will be subject to the action specified in the `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Approved` policy.

See [Approved](https://turbot.com/v5/docs/concepts/guardrails/approved) for more information.


Determine whether the Azure SQL Virtual Machine Service sql virtual machine is allowed to exist.

This policy will be evaluated by the Approved control. If an Azure SQL Virtual Machine Service sql virtual machine is not approved, it will be subject to the action specified in the `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Approved` policy.

See [Approved](https://turbot.com/v5/docs/concepts/guardrails/approved) for more information.


Configure whether to record and synchronize details for the Azure SQL Virtual Machine Service sql virtual machine into the CMDB.

The [CMDB](https://turbot.com/v5/docs/concepts/guardrails/cmdb) control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.
All policies and controls in Turbot are based around the resource, so usually the CMDB policy is set to **&quot;Enforce: Enabled&quot;**.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to **&quot;Enforce: Disabled&quot;**.

CMDB controls also use the Regions policy associated with the resource. If region is not in `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Regions` policy, the CMDB control will delete the resource from the CMDB.

(**Note**: Setting CMDB to **&quot;Skip&quot;** will also pause these changes.)


A list of Azure regions in which Azure SQL Virtual Machine Service sql virtual machines are supported for use.

Any sql virtual machines in a region not listed here will not be recorded in CMDB.

The expected format is an array of regions names. You may use the &#39;*&#39; and
&#39;?&#39; wildcard characters.


Azure > SQL Virtual Machine Service > SQL Virtual Machine > Regions

A list of Azure regions in which Azure SQL Virtual Machine Service resources are approved for use.

The expected format is an array of regions names. You may use the &#39;*&#39; and
&#39;?&#39; wildcard characters.

This policy is the default value for all Azure SQL Virtual Machine Service resources&#39; Approved &gt; Regions policies.


Azure > SQL Virtual Machine Service

Azure > SQL Virtual Machine Service > Approved Regions [Default]

Enable Azure SQL Virtual Machine Service service.

Azure > SQL Virtual Machine Service > Enabled

Azure > SQL Virtual Machine Service > Permissions > Levels

Configure whether permissions policies are in effect for Azure SQL Virtual Machine Service
This setting does not affect Subscription level permissions (Azure/Admin, Azure/Owner, etc)


Azure > SQL Virtual Machine Service > Permissions

Azure > SQL Virtual Machine Service > Permissions > Levels > Modifiers

Define the permissions levels that can be used to grant access to Storage an
Azure Subscription.  Permissions levels defined will appear in the UI to assign
access to Turbot users.


A map of Azure API to Turbot Permission Level used to customize Turbot&#39;s
standard permissions. You can add, remove or redefine the mapping of
Azure API operations to Turbot permissions levels here.

```
example:
  - &quot;Microsoft.SQL Virtual Machine Service/SQL Virtual Machine Service/delete&quot;: operator
  - &quot;Microsoft.SQL Virtual Machine Service/SQL Virtual Machine Service/write&quot;: admin
  - &quot;Microsoft.SQL Virtual Machine Service/SQL Virtual Machine Service/read&quot;: readonly
```


A list of Azure regions in which Azure SQL Virtual Machine Service resources are supported for use.

The expected format is an array of regions names. You may use the &#39;*&#39; and
&#39;?&#39; wildcard characters.

This policy is the default value for all Azure SQL Virtual Machine Service resources&#39; Regions policies.


Azure > SQL Virtual Machine Service > Regions

A template used to generate the keys and values for Azure SQL Virtual Machine Service resources.

By default, all SQL Virtual Machine Service resource Tags &gt; Template policies will use this value.


Azure > SQL Virtual Machine Service > Tags Template [Default]

Determine the action to take when an Azure SQL Virtual Machine Service sql virtual machine tags are not updated based on the `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Tags &gt; *` policies.

The control ensure Azure SQL Virtual Machine Service sql virtual machine tags include tags defined in `Azure &gt; SQL Virtual Machine Service &gt; SQL Virtual Machine &gt; Tags &gt; Template`.

Tags not defined in SQL Virtual Machine Tags Template will not be modified or deleted. Setting a tag value to `undefined` will result in the tag being deleted.

See [Tags](https://turbot.com/v5/docs/concepts/guardrails/tagging) for more information.


The template is used to generate the keys and values for Azure SQL Virtual Machine Service sql virtual machine.

Tags not defined in SQL Virtual Machine Tags Template will not be modified or deleted. Setting a tag value to `undefined` will result in the tag being deleted.

See [Tags](https://turbot.com/v5/docs/concepts/guardrails/tagging) for more information.


Azure > SQL Virtual Machine Service > SQL Virtual Machine > ServiceNow

SQL Virtual Machine resource for Azure SQL Virtual Machine Service

Mod: azure-sqlvirtualmachine

Recommended Version

Resource Types

Controls

IAM Roles

Policies