creation_time Type: STRING Provider name: properties.creationTime Description: Specifies the UTC creation time of the policy.
id Type: STRING Provider name: id Description: Resource ID.
name Type: STRING Provider name: name Description: Resource name.
state Type: STRING Provider name: properties.state Description: Specifies the state of the Advanced Threat Protection, whether it is enabled or disabled or a state has not been applied yet on the specific database or server.
type Type: STRING Provider name: type Description: Resource type.
creation_time Type: STRING Provider name: properties.creationTime Description: Specifies the UTC creation time of the policy.
disabled_alerts Type: UNORDERED_LIST_STRING Provider name: properties.disabledAlerts Description: Specifies an array of alerts that are disabled. Allowed values are: Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action, Brute_Force
email_account_admins Type: BOOLEAN Provider name: properties.emailAccountAdmins Description: Specifies that the alert is sent to the account administrators.
email_addresses Type: UNORDERED_LIST_STRING Provider name: properties.emailAddresses Description: Specifies an array of e-mail addresses to which the alert is sent.
id Type: STRING Provider name: id Description: Resource ID.
name Type: STRING Provider name: name Description: Resource name.
state Type: STRING Provider name: properties.state Description: Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database.
storage_account_access_key Type: STRING Provider name: properties.storageAccountAccessKey Description: Specifies the identifier key of the Threat Detection audit storage account.
storage_endpoint Type: STRING Provider name: properties.storageEndpoint Description: Specifies the blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net). This blob storage will hold all Threat Detection audit logs.
system_data Type: STRUCT Provider name: systemData Description: SystemData of SecurityAlertPolicyResource.
created_at Type: STRING Provider name: createdAt Description: The timestamp of resource creation (UTC).
created_by Type: STRING Provider name: createdBy Description: The identity that created the resource.
created_by_type Type: STRING Provider name: createdByType Description: The type of identity that created the resource.
last_modified_at Type: STRING Provider name: lastModifiedAt Description: The timestamp of resource last modification (UTC)
last_modified_by Type: STRING Provider name: lastModifiedBy Description: The identity that last modified the resource.
last_modified_by_type Type: STRING Provider name: lastModifiedByType Description: The type of identity that last modified the resource.
type Type: STRING Provider name: type Description: Resource type.
audit_actions_and_groups Type: UNORDERED_LIST_STRING Provider name: properties.auditActionsAndGroups Description: Specifies the Actions-Groups and Actions to audit.The recommended set of action groups to use is the following combination - this will audit all the queries and stored procedures executed against the database, as well as successful and failed logins:BATCH_COMPLETED_GROUP,SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP,FAILED_DATABASE_AUTHENTICATION_GROUP.This above combination is also the set that is configured by default when enabling auditing from the Azure portal.The supported action groups to audit are (note: choose only specific groups that cover your auditing needs. Using unnecessary groups could lead to very large quantities of audit records):APPLICATION_ROLE_CHANGE_PASSWORD_GROUPBACKUP_RESTORE_GROUPDATABASE_LOGOUT_GROUPDATABASE_OBJECT_CHANGE_GROUPDATABASE_OBJECT_OWNERSHIP_CHANGE_GROUPDATABASE_OBJECT_PERMISSION_CHANGE_GROUPDATABASE_OPERATION_GROUPDATABASE_PERMISSION_CHANGE_GROUPDATABASE_PRINCIPAL_CHANGE_GROUPDATABASE_PRINCIPAL_IMPERSONATION_GROUPDATABASE_ROLE_MEMBER_CHANGE_GROUPFAILED_DATABASE_AUTHENTICATION_GROUPSCHEMA_OBJECT_ACCESS_GROUPSCHEMA_OBJECT_CHANGE_GROUPSCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUPSCHEMA_OBJECT_PERMISSION_CHANGE_GROUPSUCCESSFUL_DATABASE_AUTHENTICATION_GROUPUSER_CHANGE_PASSWORD_GROUPBATCH_STARTED_GROUPBATCH_COMPLETED_GROUPDBCC_GROUPDATABASE_OWNERSHIP_CHANGE_GROUPDATABASE_CHANGE_GROUPThese are groups that cover all sql statements and stored procedures executed against the database, and should not be used in combination with other groups as this will result in duplicate audit logs.For more information, see Database-Level Audit Action Groups.For Database auditing policy, specific Actions can also be specified (note that Actions cannot be specified for Server auditing policy). The supported actions to audit are:SELECTUPDATEINSERTDELETEEXECUTERECEIVEREFERENCESThe general form for defining an action to be audited is:{action} ON {object} BY {principal}Note that
