How NOT to create a azurerm_mssql_database_extended_auditing_policy

Viewed 840

I'm trying to deploy my infra with terraform. I have a mssql server and database and using azurerm 2.32

While deploying mssql I'm getting following error

Error: issuing create/update request for SQL Server "itan-mssql-server" Blob Auditing Policies(Resource Group "itan-west-europe-resource-group"): sql.ExtendedServerBlobAuditingPoliciesClient#CreateOrUpdate: Failure sending request: StatusCode=400 -- Original Error: Code="DataSecurityInvalidUserSuppliedParameter" Message="Invalid parameter 'storageEndpoint'. Value should be a blob storage endpoint (e.g. https://MyAccount.blob.core.windows.net)."

I have already tried

  1. defining extended_auditing_policy on database level - failed
  2. defining extended_auditing_policy on server level - failed
  3. defining azurerm_mssql_database_extended_auditing_policy on root level - failed
  4. leaving empty extended_auditing_policy - failed

Global level of definition looks like this (^C^V from terraform documentation with adjustment to my project):


resource "azurerm_mssql_database_extended_auditing_policy" "db-policy" {
  database_id = azurerm_mssql_database.itan-mssql-database.id
  storage_endpoint = azurerm_storage_account.itan_storage_account.primary_blob_endpoint
  storage_account_access_key = azurerm_storage_account.itan_storage_account.primary_access_key
  storage_account_access_key_is_secondary = false
  retention_in_days = 1

  depends_on = [
    azurerm_mssql_database.itan-mssql-database,
    azurerm_storage_account.itan_storage_account]
}

I'm looking for one of two possible solutions:

  • total disabling of audits (I don't really needed now)
  • fixing error and enabling the audit

Thanks! Jarek

2 Answers
Related