feat: Add Database support

Author: GeekMasher

ql/lib/codeql/bicep/frameworks/Microsoft/Databases.qll

@@ -0,0 +1,106 @@
+private import bicep
+
+module Databases {
+  /**
+   * Base class for all database resources in Azure.
+   */
+  abstract class DatabaseResource extends Resource {
+    /**
+     * Returns the type of the database resource.
+     */
+    abstract string databaseType();
+
+    override string toString() {
+      result = "DatabaseResource[" + this.databaseType() + "]"
+    }
+  }
+
+  /**
+   * Azure SQL Database/Managed Instance
+   */
+  class SqlServers extends DatabaseResource, Resource {
+    SqlServers() { this.getResourceType().regexpMatch("^Microsoft.Sql/servers@.*") }
+
+    override string databaseType() { result = "sql" }
+  }
+
+  /**
+   * Azure Cosmos DB
+   */
+  class CosmosDBAccounts extends DatabaseResource, Resource {
+    CosmosDBAccounts() {
+      this.getResourceType().regexpMatch("^Microsoft.DocumentDB/databaseAccounts@.*")
+    }
+
+    override string databaseType() { result = "cosmosdb" }
+  }
+
+  /**
+   * Azure Database for PostgreSQL
+   */
+  class PostgreSQLServers extends DatabaseResource, Resource {
+    PostgreSQLServers() {
+      this.getResourceType().regexpMatch("^Microsoft.DBforPostgreSQL/servers@.*")
+    }
+
+    override string databaseType() { result = "postgresql" }
+  }
+
+  /**
+   * Azure Database for MySQL
+   */
+  class MySQLServers extends DatabaseResource, Resource {
+    MySQLServers() { this.getResourceType().regexpMatch("^Microsoft.DBforMySQL/servers@.*") }
+
+    override string databaseType() { result = "mysql" }
+  }
+
+  /**
+   * Azure Database for MariaDB
+   */
+  class MariaDBServers extends DatabaseResource, Resource {
+    MariaDBServers() { this.getResourceType().regexpMatch("^Microsoft.DBforMariaDB/servers@.*") }
+
+    override string databaseType() { result = "mariadb" }
+  }
+
+  /**
+   * Azure Data Lake Store Gen1
+   */
+  class DataLakeStoreAccounts extends DatabaseResource, Resource {
+    DataLakeStoreAccounts() {
+      this.getResourceType().regexpMatch("^Microsoft.DataLakeStore/accounts@.*")
+    }
+
+    override string databaseType() { result = "datalakestore" }
+  }
+
+  /**
+   * Azure Cache for Redis
+   */
+  class RedisCaches extends DatabaseResource, Resource {
+    RedisCaches() { this.getResourceType().regexpMatch("^Microsoft.Cache/Redis@.*") }
+
+    override string databaseType() { result = "redis" }
+  }
+
+  /**
+   * Azure Data Explorer (Kusto)
+   */
+  class KustoClusters extends DatabaseResource, Resource {
+    KustoClusters() { this.getResourceType().regexpMatch("^Microsoft.Kusto/Clusters@.*") }
+
+    override string databaseType() { result = "kusto" }
+  }
+
+  /**
+   * Azure Arc-enabled SQL Managed Instance
+   */
+  class ArcSqlManagedInstances extends DatabaseResource, Resource {
+    ArcSqlManagedInstances() {
+      this.getResourceType().regexpMatch("^Microsoft.AzureArcData/sqlManagedInstances@.*")
+    }
+
+    override string databaseType() { result = "arc-sql-managed-instance" }
+  }
+}

ql/test/library-tests/frameworks/databases/Databases.expected

@@ -0,0 +1,9 @@
+| app.bicep:2:1:9:1 | DatabaseResource[sql] |
+| app.bicep:12:1:18:1 | DatabaseResource[cosmosdb] |
+| app.bicep:21:1:29:1 | DatabaseResource[postgresql] |
+| app.bicep:32:1:40:1 | DatabaseResource[mysql] |
+| app.bicep:43:1:51:1 | DatabaseResource[mariadb] |
+| app.bicep:54:1:58:1 | DatabaseResource[datalakestore] |
+| app.bicep:61:1:71:1 | DatabaseResource[redis] |
+| app.bicep:74:1:83:1 | DatabaseResource[kusto] |
+| app.bicep:86:1:93:1 | DatabaseResource[arc-sql-managed-instance] |

ql/test/library-tests/frameworks/databases/Databases.ql

@@ -0,0 +1,5 @@
+import bicep
+
+query predicate databases(Databases::DatabaseResource dr) {
+  any()
+}

ql/test/library-tests/frameworks/databases/app.bicep

@@ -0,0 +1,93 @@
+// Azure SQL Database
+resource sqlDb 'Microsoft.Sql/servers@2022-02-01' = {
+  name: 'sqlserver1'
+  location: 'eastus'
+  properties: {
+    administratorLogin: 'adminuser'
+    administratorLoginPassword: 'P@ssw0rd!'
+  }
+}
+
+// Azure Cosmos DB
+resource cosmosDb 'Microsoft.DocumentDB/databaseAccounts@2022-03-15' = {
+  name: 'cosmosdb1'
+  location: 'eastus'
+  properties: {
+    databaseAccountOfferType: 'Standard'
+  }
+}
+
+// Azure Database for PostgreSQL
+resource postgresqlDb 'Microsoft.DBforPostgreSQL/servers@2022-01-20' = {
+  name: 'pgserver1'
+  location: 'eastus'
+  properties: {
+    administratorLogin: 'pgadmin'
+    administratorLoginPassword: 'P@ssw0rd!'
+    version: '11'
+  }
+}
+
+// Azure Database for MySQL
+resource mysqlDb 'Microsoft.DBforMySQL/servers@2022-01-20' = {
+  name: 'mysqlserver1'
+  location: 'eastus'
+  properties: {
+    administratorLogin: 'mysqladmin'
+    administratorLoginPassword: 'P@ssw0rd!'
+    version: '5.7'
+  }
+}
+
+// Azure Database for MariaDB
+resource mariadbDb 'Microsoft.DBforMariaDB/servers@2018-06-01' = {
+  name: 'mariadbserver1'
+  location: 'eastus'
+  properties: {
+    administratorLogin: 'mariadbadmin'
+    administratorLoginPassword: 'P@ssw0rd!'
+    version: '10.2'
+  }
+}
+
+// Azure Data Lake Store Gen1
+resource datalakeStore 'Microsoft.DataLakeStore/accounts@2016-11-01' = {
+  name: 'datalakestore1'
+  location: 'eastus'
+  properties: {}
+}
+
+// Azure Cache for Redis
+resource redisCache 'Microsoft.Cache/Redis@2023-04-01' = {
+  name: 'rediscache1'
+  location: 'eastus'
+  properties: {
+    sku: {
+      name: 'Basic'
+      family: 'C'
+      capacity: 0
+    }
+  }
+}
+
+// Azure Data Explorer (Kusto)
+resource kustoCluster 'Microsoft.Kusto/Clusters@2023-05-02' = {
+  name: 'kustocluster1'
+  location: 'eastus'
+  properties: {
+    sku: {
+      name: 'Standard_D13_v2'
+      capacity: 2
+    }
+  }
+}
+
+// Azure Arc-enabled SQL Managed Instance
+resource arcSqlMi 'Microsoft.AzureArcData/sqlManagedInstances@2022-03-01-preview' = {
+  name: 'arcsqlmi1'
+  location: 'eastus'
+  properties: {
+    administratorLogin: 'arcadmin'
+    administratorLoginPassword: 'P@ssw0rd!'
+  }
+}