how do i implement sql server under hippa compliance using azure policies/initiative ?

[cdtsushant]

i assign hippa/hittrust for perticular rg in my  subscription and created sql server under that after creating sql server on that is shows following output.

and also where i ensure what ever resource i deploy that is hippa compliant?

is there any audit to fulfill this scenario?

[#2]

@cdtsushant 

Hi you need to verify the enforcement mode and the policy effects

do you want to deploy after creation ? deny the creation if correct parameters are not applied ?

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#enforcement-m...

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects#disabled

If for example you want to deploy if not exists  you should create a remediation task to be compliant .

Another way is Infrastructure as code : design your template in a such a way that you are building compliant resources by design .

Azure blueprint also can help you to achieve this goal for future resources .

https://docs.microsoft.com/en-us/azure/governance/blueprints/samples/hipaa-hitrust-9-2