After (lot of ) Hacks - A working way to deploying Azure SQL on Virtual Machine using terraform

Mon, 25 May 2020 00:00:00 +0000

I am very new with terraform. I was trying out terraform to deploy an SQL VM to Azure. SQL VM in Azure has undergone many changes recently from using SqlVmIaasExtension to manage SQL VM instance to a new resource type Microsoft.SqlVirtualMachine/SqlVirtualMachines

To implement the best practice of SQL, we had to fall to PowerShell DSC. Now Azure natively support disk management(new Storage Type) via SqlVirtualMachine resource type.

I wanted to get new Storage type implemented via terraform azurerm_mssql_virtual_machine. This resource in terraform under module azurerm supports everything except new storage types.

Grant SQL Server account access to Lock Pages in Memory using PowerShell DSC.

Tue, 07 Mar 2017 00:00:00 +0000

Lock Pages in Memory is a setting that can be set on 64-bit operating systems that essentially tell Windows not to swap out SQL Server memory to disk.

I was implementing SQL server hardening via PowerShell DSC and one of the requirement was to have Lock Pages In Memory enabled for SQL Service account. There was a powershell script created and available from blog post by keepingitgeek.

I converted this to a DSC module for my use. The code snippet is added below.

SQL on Ajo Mathew

After (lot of ) Hacks - A working way to deploying Azure SQL on Virtual Machine using terraform

Grant SQL Server account access to Lock Pages in Memory using PowerShell DSC.