Deploy - Configure diagnostic settings for SQL Databases to Log Analytics workspace should exclude the master database

[Pedroms1]

Details of the scenario you tried and the problem that is occurring

This policy is returning a non compliant status on synapse master databases. The issue is that it is not possible to enable diagnostic settings on the master database in any scenario.

Verbose logs showing the problem

N/A

Suggested solution to the issue

Exclude the master database on this policy.

[spoelly]

I posted here a suggestion for the team. https://github.com/Azure/azure-policy/issues/872

[kenieva]

It is possible to exemption resource types such as SQL Database using exemptions resource selectors. Or by updating the policy definition.

[matthetherington]

@kenieva could this be reopened?

It's indeed possible to create an exemption, but it shouldn't be required. If Azure Policy has flagged master as uncompliant, it is not possible for anyone to correct that - so the flagging is a mistake.

[mbrouwer]

@kenieva This really should be reopened because we dont want to exempt databases, we want to audit databases, just not the ones of kind "v12.0,system" only on "v12.0,user" or we should have the option to apply the settings to databases of kind "v12.0,system":