Ensure that Advanced Data Security feature is enabled within your Microsoft Azure SQL server configuration settings to provide a set of advanced SQL security capabilities for your SQL database servers, such Data Discovery and Classification – used for discovering and classifying sensitive data, Vulnerability Assessment – useful for finding and mitigating potential database vulnerabilities, and Advanced Threat Protection – a service used for detecting abnormal activities that could indicate a threat to your SQL databases.
The Advanced Data Security (ADS) suite of security services represents an advanced layer of database security, which enables you to recognize and respond to potential threats as they occur by providing security alerts on abnormal activity within your SQL servers. Once ADS is enabled and configured, you can receive notification alerts upon suspicious database activities, potential vulnerabilities, SQL injection attacks, and anomalous database access patterns. These threat detection alerts provide details of suspicious activity and generate recommendations on how to investigate and mitigate the threats found. Additionally, Azure SQL Advanced Data Security includes functionality for discovering and classifying sensitive and protected data.
Note: Advanced Data Security is a paid service. Cloud Conformity recommends you to enable this feature at least on business-critical Azure SQL servers.
To determine if Advanced Data Security (ADS) is enabled for your Microsoft Azure SQL servers, perform the following actions:
Remediation / Resolution
To enable Advanced Data Security (ADS) feature for your Microsoft Azure SQL database servers, perform the following actions:
- Azure Official Documentation
- Advanced data security for Azure SQL Database
- Azure SQL Database Advanced Threat Protection for single or pooled databases
- CIS Microsoft Azure Foundations
- Azure Command Line Interface (CLI) Documentation
Unlock the Remediation Steps
Gain free unlimited access
to our full Knowledge Base
Over 750 rules & best practices
Get started for FREE
You are auditing:
Advanced Data Security for SQL Servers
Risk level: Medium