DataSic

<#
    JIT 'Allow access to Azure services' for runbook on Azure Sql Database/Datawarehouse
#>
try
{
    # Init variables
    $resourceGroupName = Get-AutomationVariable -Name "ResourceGroup"
    $serverName = Get-AutomationVariable -Name "ServerName"
    $firewallRuleName = "AllowAllWindowsAzureIps"
 

DataSic

<#
    https://docs.microsoft.com/en-us/powershell/module/azurerm.sql/set-azurermsqldatabaseauditing
#>
$setAzureRmSqlDatabaseAuditingSplat = @{
    ResourceGroupName = "ResourceGroupName"
    ServerName = "ServerName"
    DatabaseName = "DatabaseName"
    StorageAccountName = "StorageAccountName"
    State = "Enabled"
}

DataSic

SELECT *
  FROM sys.dm_audit_actions
 WHERE containing_group_name IN ('SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP',
                                 'FAILED_DATABASE_AUTHENTICATION_GROUP',
							                   'BATCH_COMPLETED_GROUP')

DataSic

$AuditActionGroup = @("SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP",
                      "FAILED_DATABASE_AUTHENTICATION_GROUP",
                      "BATCH_COMPLETED_GROUP",
                      "BACKUP_RESTORE_GROUP",
                      "DATABASE_OPERATION_GROUP",
                      "USER_CHANGE_PASSWORD_GROUP")

$setAzureRmSqlDatabaseAuditingSplat = @{
    ResourceGroupName = "ResourceGroupName"
    ServerName = "ServerName"

DataSic

SELECT *
  FROM sys.fn_get_audit_file('https://StorageAccountName.blob.core.windows.net/sqldbauditlogs/ServerName/SqlDataWarehouseName/', default, default)