You're reading from Microsoft Azure Security Technologies Certification and Beyond Gain practical skills to secure your Azure environment and pass the AZ-500 exam

Product type Paperback

Published in Nov 2021

Publisher Packt

ISBN-13 9781800562653

Length 526 pages

Edition 1st Edition

Tools

Azure

Concepts

Cybersecurity

Author (1):

David Okeyode

View More author details

Table of Contents (19) Chapters

Preface

1. Section 1: Implement Identity and Access Security for Azure

2. Chapter 1: Introduction to Azure Security FREE CHAPTER

3. Chapter 2: Understanding Azure AD

4. Chapter 3: Azure AD Hybrid Identity

5. Chapter 4: Azure AD Identity Security

6. Chapter 5: Azure AD Identity Governance

7. Section 2: Implement Azure Platform Protection

8. Chapter 6: Implementing Perimeter Security

9. Chapter 7: Implementing Network Security

10. Chapter 8: Implementing Host Security

11. Chapter 9: Implementing Container Security

12. Section 3: Secure Storage, Applications, and Data

13. Chapter 10: Implementing Storage Security

14. Chapter 11: Implementing Database Security

15. Chapter 12: Implementing Secrets, Keys, and Certificate Management with Key Vault

16. Chapter 13: Azure Cloud Governance and Security Operations

17. Assessments

18. Other Books You May Enjoy

Protecting Azure SQL against vulnerabilities

A holistic security strategy should not only include preventing successful attacks, but should also include detecting ongoing threats that may have bypassed existing defenses. There are two sides to implementing this for our SQL databases. The starting point is to enable Azure SQL database auditing to record database operations. The other side is to implement Azure Defender for SQL to analyze the logs and stay alert for suspicious events.

Enabling Azure SQL database auditing

Azure SQL auditing is a feature that can be used to record database events to an audit log in an Azure Storage account, Log Analytics workspace, or event hub. The main use case of this feature is to record database operations for further analysis. Another use case is for compliance purposes.

This feature is not enabled by default. Using the Azure portal, we can enable it at the server or database level from the Security section (Figure 11.33). Enabling it at...