Add Defender support for Open-source relational databases

[grtn316]

terraform-azurerm-caf-enterprise-scale/modules/management/locals.tf

Lines 63 to 72 in 65a69f1

	deploy_defender_for_acr = local.settings.security_center.config.enable_defender_for_acr
	deploy_defender_for_app_services = local.settings.security_center.config.enable_defender_for_app_services
	deploy_defender_for_arm = local.settings.security_center.config.enable_defender_for_arm
	deploy_defender_for_dns = local.settings.security_center.config.enable_defender_for_dns
	deploy_defender_for_key_vault = local.settings.security_center.config.enable_defender_for_key_vault
	deploy_defender_for_kubernetes = local.settings.security_center.config.enable_defender_for_kubernetes
	deploy_defender_for_servers = local.settings.security_center.config.enable_defender_for_servers
	deploy_defender_for_sql_servers = local.settings.security_center.config.enable_defender_for_sql_servers
	deploy_defender_for_sql_server_vms = local.settings.security_center.config.enable_defender_for_sql_server_vms
	deploy_defender_for_storage = local.settings.security_center.config.enable_defender_for_storage

Please add a flag to enable Open-source relational databases for Azure defender as part of the management resources configuration.

[krowlandson]

Hi David... thank you for the feature request.

Just for clarity, do you mean for the following?
https://docs.microsoft.com/en-us/azure/security-center/defender-for-databases-introduction

If so, I believe we will need to make a few updates to the associated policies before we can add a feature flag for this, but this shouldn't be a problem. Will add this to our backlog and discuss with the team.

[grtn316]

@krowlandson that is the one. Thanks!

[krowlandson]

Great, thank you for confirming. We will try to pull this in with the next policy update but as the "feature flag" will require an additional value in the configure_management_resources variable, this will be a breaking change. As such, we may need to hold back on updating the schema until a major release. Will keep you posted!

[krowlandson]

Once Azure/Enterprise-Scale/issues/733 is resolved, I will pull the updated policies in and we can hopefully add a feature flag to enable this particular feature.