Defining your own control sets

The mssql_secured::apply defined type allows you to define your own subsets of controls. Although we have helped you by providing some predefined sets, you probably want to express your own control sets.

How does it work?

The mssql_secured::apply tries to translate the specified set name into a list of controls. It does this by doing a hiera lookup wet the key: mssql_secured::sets::set_name where set_name is the name of your set.

The value returned needs to be an Array of Strings. Here is an example of this:

mssql_secured::sets::MY_OWN_SET:
  - systemd_service_files_are_enabled
  - data_cluster_initialized_successfully
  - log_destinations_are_set_correctly
  - logging_collector_is_enabled
  - log_file_destination_directory_is_set_correctly
  - filename_pattern_for_log_files_is_set_correctly
  - log_file_permissions_are_set_correctly
  - log_truncate_on_rotation_is_enabled