1

Every week I'm getting a failed "Vulnerability Assessment" email report from my Microsoft Azure SQL Database that is incorrect.
It complains about columns that have is_computed column in sys.columns set to 1.
It is not possible to add a classification for those columns.

enter image description here

Is it possible to stop the warning?

1

You need to add those as a 'baseline', basically marking those items as ignorable items so that when the VA report runs again it ignores them.

See here for more information.

  • I have added those for all normal columns in the database. Took a bit of time, but not too much. The problem here is that the column is a calculated column, and you cannot add those to the baseline. – Henrik Staun Poulsen Aug 13 at 9:09
  • That's odd, I'm not seeing that behaviour at all. If I create a new Azure SQL DB, create a table with a column called "CreditCard" then run a VA scan, I get a warning about sensitive data column classification. If I then approve as baseline to eliminate that warning and run a new scan, that warning is not shown in the new scan. – HandyD Aug 14 at 4:58
  • to that table, please add a column called CopyOfCreditCard as a calculated column: CopyOfCreditCard = (CreditCard) and try to add ADD SENSITIVITY CLASSIFICATION TO table.CopyOfCreditCard WITH (LABEL = 'Confidential', INFORMATION_TYPE = 'Financial') Then you'll see that this is not possible. Next time you get a Vulnerability Assessment email from Microsoft, it will tell you to fix the new column. And this is not possible, as you can see. – Henrik Staun Poulsen Aug 14 at 8:15
  • Approving the list of warnings as a baseline solves the problem with the warning on calculated columns, just as you wrote in your answer. It is just annoying that I have to do that for each and every time I add a calculated column. Thank you for your help. – Henrik Staun Poulsen Sep 5 at 7:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.