in internal/scanners/as/rules.go [14:73]
func (a *AnalysisServicesScanner) GetRecommendations() map[string]models.AzqrRecommendation {
return map[string]models.AzqrRecommendation{
"as-001": {
RecommendationID: "as-001",
ResourceType: "Microsoft.AnalysisServices/servers",
Category: models.CategoryMonitoringAndAlerting,
Recommendation: "Azure Analysis Service should have diagnostic settings enabled",
Impact: models.ImpactLow,
Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
service := target.(*armanalysisservices.Server)
_, ok := scanContext.DiagnosticsSettings[strings.ToLower(*service.ID)]
return !ok, ""
},
LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/analysis-services/analysis-services-logging",
},
"as-002": {
RecommendationID: "as-002",
ResourceType: "Microsoft.AnalysisServices/servers",
Category: models.CategoryHighAvailability,
Recommendation: "Azure Analysis Service should have a SLA",
RecommendationType: models.TypeSLA,
Impact: models.ImpactHigh,
Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
i := target.(*armanalysisservices.Server)
sku := *i.SKU.Tier
sla := "None"
if sku != armanalysisservices.SKUTierDevelopment {
sla = "99.9%"
}
return sla == "None", sla
},
LearnMoreUrl: "https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services",
},
"as-004": {
RecommendationID: "as-004",
ResourceType: "Microsoft.AnalysisServices/servers",
Category: models.CategoryGovernance,
Recommendation: "Azure Analysis Service Name should comply with naming conventions",
Impact: models.ImpactLow,
Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
c := target.(*armanalysisservices.Server)
caf := strings.HasPrefix(*c.Name, "as")
return !caf, ""
},
LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/resource-abbreviations",
},
"as-005": {
RecommendationID: "as-005",
ResourceType: "Microsoft.AnalysisServices/servers",
Category: models.CategoryGovernance,
Recommendation: "Azure Analysis Service should have tags",
Impact: models.ImpactLow,
Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
c := target.(*armanalysisservices.Server)
return len(c.Tags) == 0, ""
},
LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources?tabs=json",
},
}
}