Azure Database Services Benchmark
28 articles
- Enable Microsoft Entra Authentication for Azure SQL Servers to Centralize Identity and Access Management
- Enforce SSL-Only Access for Azure Cache for Redis to Secure Data in Transit
- Set Minimum TLS Version to 1.2 or Higher for Secure Azure Services
- Implement and Periodically Review Access Policies for Azure Cache for Redis to Enforce RBAC and Least Privilege
- Enable System Assigned Managed Identity on Azure Cache for Redis to Enhance Secure Access
- Disable Public Network Access for Azure Cache for Redis to Strengthen Network Security
- Restrict Azure Firewalls & Networks to Selected Trusted Networks for Enhanced Security
- Use Private Endpoints to Secure Azure Service Network Traffic Within VNets
- Use Microsoft Entra ID Client Authentication with Azure RBAC for Secure Access Management
- Enforce SSL Connections on Azure MySQL Servers to Secure Data in Transit
- Enforce TLS 1.2 or Higher on Azure MySQL Flexible Server for Secure Data Transmission
- Enable Audit Logging on Azure MySQL Servers to Enhance Security and Compliance
- Enable CONNECTION Event Logging in Audit Logs for Azure MySQL Servers
- Enforce SSL Connections on Azure PostgreSQL Servers to Secure Data in Transit
- Enable log_checkpoints Parameter on Azure PostgreSQL Servers for Improved Monitoring and Troubleshooting
- Enable log_connections Parameter on Azure PostgreSQL Servers for Connection Tracking and Security Auditing
- Enable log_disconnections Parameter on Azure PostgreSQL Servers for Enhanced Session Auditing
- Enable connection_throttling on Azure PostgreSQL Servers to Prevent Connection Overload and DoS Attacks
- Set log_retention_days Greater Than 3 on Azure PostgreSQL Servers for Extended Log Retention
- Disable ‘Allow Access to Azure Services’ on Azure PostgreSQL Servers to Limit Network Exposure
- Enable Infrastructure Double Encryption on Azure PostgreSQL Single Server for Enhanced Data Protection
- Enable SQL Server Auditing on Azure to Monitor and Secure Database Activities
- Prevent Azure SQL Database Ingress from 0.0.0.0/0 to Restrict Open Internet Access
- Enable Transparent Data Encryption with Customer-Managed Keys on Azure SQL Servers for Enhanced Data Security
- Configure Microsoft Entra Authentication for Azure SQL Servers to Enable Centralized Identity Management
- Enable Transparent Data Encryption (TDE) on Azure SQL Databases to Protect Data at Rest
- Configure Audit Log Retention Greater Than 90 Days on Azure SQL Servers for Compliance and Forensics
- Disable Public Network Access to Secure Azure Databases and Resources