fix(bicep): Add bicep specific for CKV_AZURE_25 since ARM implementation fails

[mLe110]

User description

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

The change uses the graph to properly check for the 'state' and 'disabledAlerts' attributes in the required securityAlertPolicies for Azure SQL servers and databases. As of now, checkov uses the ARM implementation for this check, which fails for bicep scripts.

Fixes #6963

Checklist:

• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes

---

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:

Implements a new graph-based check for Azure SQL Server threat detection alerts in Bicep scripts. Adds a YAML configuration file for the check, creates test cases to verify the implementation, and updates the test suite to include the new check. The change addresses an issue where the existing ARM implementation fails for Bicep scripts, ensuring that all threat types are properly enabled for Azure SQL servers and databases.

Topic	Details
Test Cases	Adds test cases and resources to verify the new graph-based check implementation Modified files (3) tests/bicep/graph/checks/resources/SQLServerThreatDetectionTypes/main.bicep tests/bicep/graph/checks/resources/SQLServerThreatDetectionTypes/expected.yaml tests/bicep/graph/checks/test_yaml_policies.py Latest Contributors(2) User Commit Date tsmithv11 feat-bicep-Add-bicep-v... April 19, 2024 lirshindalman feat-general-Add-image... September 28, 2023
Graph Check Impl	Implements a new graph-based check for Azure SQL Server threat detection alerts in Bicep scripts Modified files (1) checkov/bicep/checks/graph_checks/SQLServerThreatDetectionTypes.yaml Latest Contributors(0) User Commit Date

This pull request is reviewed by Baz. Join @mLe110 and the rest of your team on (Baz).

[tsmithv11]

Great work and thanks for the contribution! Can you add a test of a Microsoft.Sql/servers or Microsoft.Sql/servers/databases without a nested securityAlertPolicies to make sure it has the desired behavior?

[mLe110]

Great work and thanks for the contribution! Can you add a test of a Microsoft.Sql/servers or Microsoft.Sql/servers/databases without a nested securityAlertPolicies to make sure it has the desired behavior?

Good point! I'll do that right away

[mLe110]

Great work and thanks for the contribution! Can you add a test of a Microsoft.Sql/servers or Microsoft.Sql/servers/databases without a nested securityAlertPolicies to make sure it has the desired behavior?

Done

[tsmithv11]

🚀