Skip to content

Azure.Defender.SQLOnVM.md

Latest commit

 

History

History
89 lines (62 loc) · 2.89 KB

Azure.Defender.SQLOnVM.md

File metadata and controls

89 lines (62 loc) · 2.89 KB
Raw
severity Critical
pillar Security
category SE:10 Monitoring and threat detection
resource Microsoft Defender for Cloud
resourceType Microsoft.Security/pricings
online version https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Defender.SQLOnVM/

Configure Microsoft Defender for SQL Servers on machines to the Standard tier

SYNOPSIS

Enable Microsoft Defender for SQL servers on machines.

DESCRIPTION

SQL databases are used to store critical and strategic assets for your company and should be carefully secured. Microsoft Defender for SQL Servers on machines represents a single go-to location to manage security capabilities.

Enabling Defender for SQL automatically enables vulnerability Assessment for your SQL databases hosted in a VM. It discovers, tracks, and provides guidance to remediate potential database vulnerabilities.

Enabling at subscription level doesn't protect all your SQL servers. A Log Analytics agent must be deployed on the machine and the Log Analytics workspace must have Defender for SQL enabled.

RECOMMENDATION

Consider using Microsoft Defender for SQL Servers on machines to protect your SQL servers running on VMs.

EXAMPLES

Configure with Azure template

To enable Defender for SQL servers on machines:

  • Set the Standard pricing tier for Microsoft Defender for SQL servers on machines.

For example:

{
  "type": "Microsoft.Security/pricings",
  "apiVersion": "2024-01-01",
  "name": "SqlServerVirtualMachines",
  "properties": {
    "pricingTier": "Standard"
  }
}

Configure with Bicep

To enable Defender for SQL servers on machines:

  • Set the Standard pricing tier for Microsoft Defender for SQL servers on machines.

For example:

resource defenderForSQLOnVM 'Microsoft.Security/pricings@2024-01-01' = {
  name: 'SqlServerVirtualMachines'
  properties: {
    pricingTier: 'Standard'
  }
}

Configure with Azure CLI

az security pricing create -n 'SqlServerVirtualMachines' --tier 'standard'

Configure with Azure PowerShell

Set-AzSecurityPricing -Name 'SqlServerVirtualMachines' -PricingTier 'Standard'

LINKS