Azure Sql Audit - Security Checks
Checks Performed
- Auditing Disabled for SQL Databases
- Auditing Disabled for SQL Servers
- Check for PostgreSQL Log Retention Period
- Check For Publicly Accessible SQL Servers
- Check For Sufficient Point In Time Restore (PITR) Backup Retention Period
- Check for TLS Protocol Latest Version
- Enable Auto-Failover Groups By Server
- Enable Automatic Failover
- Enable Automatic Tuning For SQL Database Servers
- Enable CONNECTION_THROTTLING Parameter for PostgreSQL Servers
- Enable Geo-Redundant Backups
- Enable In-Transit Encryption for PostgreSQL Database Servers
- Enable In-Transit Encryption for Redis Cache Servers
- Enable Infrastructure Double Encryption
- Enable log_checkpoints Parameter for PostgreSQL Flexible Servers
- Enable LOG_CHECKPOINTS Parameter for PostgreSQL Servers
- Enable LOG_CONNECTIONS Parameter for PostgreSQL Servers
- Enable LOG_DISCONNECTIONS Parameter for PostgreSQL Servers
- Enable LOG_DURATION Parameter for PostgreSQL Servers
- Enable Storage Auto-Growth
- Ensure SQL Server TDE Protector Is Encrypted With CMK
- Ensure that AuditActionGroups in auditing is set properly
- Ensure That Azure Active Directory Admin Is Configured
- Ensure That Vulnerability Assessment Is Enabled On SQL Server By Setting Storage Account
- Ensure That Vulnerability Assessment Setting Periodic Recurring Scans Is Set To On
- Ensure That Vulnerability Assessment Setting Send Scan Reports To Is Configured
- Ensure TLS Version Is Set To TLSV1.2 For MySQL Flexible Database Server
- Ensure Vulnerability Assessment Setting To Send Email Notifications To Admins And Subscription Owners Is Set
- MySQL Database Server Should Enforce SSL Connection
- Restrict Default Network Access for Azure Cosmos DB Accounts
- Send Threat Detection Alerts Disabled for SQL Databases
- Send Threat Detection Alerts Disabled for SQL Servers
- Short Auditing Retention Period for SQL Databases
- Short Auditing Retention Period for SQL Servers
- Short Threat Detection Retention Period for SQL Databases
- Short Threat Detection Retention Period for SQL Servers
- Short Threat Detection Retention Period for SQL Servers
- SQL Database Servers Should Not Have Unrestricted Access
- Threat Detection Alerts Disabled for SQL Databases
- Threat Detection Alerts Disabled for SQL Servers
- Threat Detection Disabled for SQL Databases
- Threat Detection Disabled for SQL Servers
- Transparent Data Encryption Disabled for SQL Databases