Express 配置 PowerShell 命令参考资料

重要

注意：根据世纪互联发布的公告，Azure 中国区将于2026年10月1日正式停止提供所有 Microsoft Defender for Cloud 功能。

重要

以下命令针对该 SQL 漏洞评估统一 API，并且对全部五种受支持的资源类型均接受单个 Azure -ResourceId：

  • Microsoft.Sql/servers
  • Microsoft.Sql/managedInstances
  • Microsoft.Synapse/workspaces
  • Microsoft.Compute/virtualMachines （具有 sqlServers/{instance}/databases/{db} 子路径）
  • Microsoft.HybridCompute/machines （具有 sqlServers/{instance}/databases/{db} 子路径）

设置（Get / Set / Remove）、扫描发起/轮询（Invoke-…Scan、Get-…ScanOperationResult）以及扫描记录读取（Get-…Scan、单条和列表）仅适用于 PaaS——在 Microsoft.Compute/virtualMachines 或 Microsoft.HybridCompute/machines 上不受支持。 在 IaaS 资源上，使用 Get-SqlVulnerabilityAssessmentScanResult -ScanId 'latest' 读取扫描数据。

托管实例（master、model、msdb） 和 Synapse （master） 上的系统数据库使用其自然资源 ID（例如…/managedInstances/{mi}/databases/master）进行寻址。 该模块以透明方式将这些请求路由到实例/工作区级 URL，并 databaseName 作为查询参数。

参考 API 文档：

本文列出了可用于 SQL 漏洞评估快速配置的 PowerShell 命令。

创建位于 Express 配置 PowerShell 包装器模块上的脚本的本地副本，并使用以下文件名 SqlVulnerabilityAssessmentCommands.psm1保存该文件，可以使用以下命令引用该文件：

获取 SQL 漏洞评估设置

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"state":"Enabled"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/providers/Microsoft.Security/sqlVulnerabilityAssessments/default","name":"default","type":"Microsoft.Security/sqlVulnerabilityAssessments"}

设置 SQL 漏洞评估设置

示例 1：启用漏洞评估设置。 封装器从 -State 构造请求体。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Set-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest -State Enabled

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : PUT
Content    : {"properties":{"state":"Enabled"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/providers/Microsoft.Security/sqlVulnerabilityAssessments/default","name":"default","type":"Microsoft.Security/sqlVulnerabilityAssessments"}

示例 2：禁用漏洞评估设置。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Set-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest -State Disabled

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : PUT
Content    : {"properties":{"state":"Disabled"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/providers/Microsoft.Security/sqlVulnerabilityAssessments/default","name":"default","type":"Microsoft.Security/sqlVulnerabilityAssessments"}

删除 SQL 漏洞评估设置

所示为 SQL 托管实例 资源的示例。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Remove-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/managedInstances/vulnerabilityaseessmentmi

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-deletes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : DELETE
Content    :

执行 SQL 漏洞评估扫描

示例 1：火灾和忘记。 包装器返回一个 pscustomobject，其中提供了 Location 标头和解析后的 OperationId，你稍后可以使用 Get-SqlVulnerabilityAssessmentScanOperationResult 对其进行轮询。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Invoke-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db

Results:

Headers     : {[Cache-Control, System.String[]], [Pragma, System.String[]], [x-ms-request-id, System.String[]], [Location, System.String[]]…}
Version     : 1.1
StatusCode  : 202
Method      : POST
Location    : https://management.chinacloudapi.cn/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/scanOperationResults/9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11?api-version=2026-04-01-preview
OperationId : 9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11

示例 2：发起一次扫描，并原地等待其进入终止状态。 借助 -Wait，包装器会轮询扫描操作，并在其到达终止状态后获取最新的扫描记录，从而让您获得完整的扫描摘要（触发类型、状态、开始/结束时间、规则计数、是否应用基线标志，……）。 该 cmdlet 返回一个pscustomobject，其中包含ScanStatus（终端状态字符串）和Scan（反序列化的扫描记录）。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
$r = Invoke-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -Wait -PollIntervalSeconds 5 -TimeoutSeconds 600
$r.ScanStatus
$r.Scan.properties

Results:

ScanStatus : Passed
Scan       : @{properties=@{triggerType=OnDemand; state=Passed; startTime=2026-06-02T12:00:01Z;
              endTime=2026-06-02T12:00:48Z; scanStatus=Passed; isBaselineApplied=True;
              numberOfFailedSecurityChecks=0; server=vulnerabilityaseessmenttest; database=db};
              id=/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/Scheduled-20260602;
              name=Scheduled-20260602; type=Microsoft.Security/sqlVulnerabilityAssessments/scans}

获取 SQL 漏洞评估扫描

Example 1：列出为Azure SQL数据库记录的每个扫描。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"value":[{"properties":{"triggerType":"OnDemand","state":"Passed","scanStatus":"Passed","isBaselineApplied":true,"numberOfFailedSecurityChecks":0},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/Scheduled-20260602","name":"Scheduled-20260602","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans"}]}

示例 2：获取 Synapse SQL 池的最新扫描。 包装器接受字面量 -ScanId 'latest'，以深入查看最新的扫描记录。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Synapse/workspaces/vaSynapseWs/sqlPools/pool1 -ScanId 'latest'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"triggerType":"OnDemand","state":"Passed","scanStatus":"Passed","isBaselineApplied":true,"numberOfFailedSecurityChecks":2},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Synapse/workspaces/vaSynapseWs/sqlPools/pool1/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest","name":"latest","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans"}

获取 SQL 漏洞评估扫描操作结果

轮询由 Invoke-SqlVulnerabilityAssessmentScan 发起的进行中扫描。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScanOperationResult -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -OperationId 9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"scanStatus":"InProgress","startTime":"2026-06-02T12:00:01Z"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/scanOperationResults/9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11","name":"9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanOperationResults"}

获取 SQL 漏洞评估扫描结果

Example 1：列出给定扫描Azure SQL数据库的每个规则结果。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScanResult -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -ScanId 'latest'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"value":[{"properties":{"ruleId":"VA2062","status":"NonFinding","isTrimmed":false},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest/scanResults/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanResults"},{"properties":{"ruleId":"VA2065","status":"Finding","isTrimmed":false},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest/scanResults/VA2065","name":"VA2065","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanResults"}]}

示例 2：深入了解 SQL VM 上的单个失败规则。 VM 资源 ID 使用 Microsoft.Compute/virtualMachines/{vm}/sqlServers/{instance}/databases/{db} 子路径。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScanResult -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Compute/virtualMachines/vaSqlVm/sqlServers/MSSQLSERVER/databases/db -ScanId 'latest' -RuleId VA2065

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"ruleId":"VA2065","status":"Finding","isTrimmed":false,"queryResults":[["dbo","db_owner"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Compute/virtualMachines/vaSqlVm/sqlServers/MSSQLSERVER/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest/scanResults/VA2065","name":"VA2065","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanResults"}

获取 SQL 漏洞评估基线

列出当前为数据库配置的基线规则（五种受支持的资源类型中的任何一种）。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentBaseline -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"value":[{"properties":{"results":[["True"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1143","name":"VA1143","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"},{"properties":{"results":[["False"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1219","name":"VA1219","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}]}

添加 SQL 漏洞评估基线

示例 1：通过发送带有空 latestScan = true 对象的 results，根据最近一次扫描为基线设定初始值。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Add-SqlVulnerabilityAssessmentBaseline -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -Body '{ "latestScan": true, "results": {} }'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : POST
Content    : {"value":[{"properties":{"results":[["True"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1143","name":"VA1143","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}]}

示例 2：使用显式规则结果为基线设定初始值——适用于声明式、幂等的基线。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Add-SqlVulnerabilityAssessmentBaseline -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -Body '{
  "latestScan": false,
  "results": {
    "VA2062": [
      [
        "AllowAll",
        "0.0.0.0",
        "255.255.255.255"
      ]
    ]
  }
}'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : POST
Content    : {"value":[{"properties":{"results":[["AllowAll","0.0.0.0","255.255.255.255"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}]}

获取 SQL 漏洞评估基线规则

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentBaselineRule -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -RuleId VA2062

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"results":[["AllowAll","0.0.0.0","255.255.255.255"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}

设置 SQL 漏洞评估基线规则

创建或替换单个基线规则。 -Body 会按原样发送，以便与标准 properties.results 形式匹配。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Set-SqlVulnerabilityAssessmentBaselineRule -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -RuleId VA2062 -Body '{
  "latestScan": false,
  "results": [
    [
      "AllowAll",
      "0.0.0.0",
      "255.255.255.255"
    ]
  ]
}'

Headers    : {[Cache-Control, System.String[]], [Pragma, System.String[]], [x-ms-request-id, System.String[]], [Server, System.String[]]…}
Version    : 1.1
StatusCode : 200
Method     : PUT
Content    : {"properties":{"results":[["AllowAll","0.0.0.0","255.255.255.255"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}

删除 SQL 漏洞评估基线规则

此处显示的是已启用 Azure Arc 的 SQL Server 数据库示例。 Arc 资源 ID 使用 Microsoft.HybridCompute/machines/{machine}/sqlServers/{instance}/databases/{db} 子路径。

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Remove-SqlVulnerabilityAssessmentBaselineRule -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.HybridCompute/machines/vaSqlArc/sqlServers/MSSQLSERVER/databases/db -RuleId VA2062

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-deletes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : DELETE
Content    :

后续步骤

查找和修正 Azure SQL 数据库中的漏洞

  • Last updated on