Checks performed
- Short Auditing Retention Period for SQL Servers
- Auditing Disabled for SQL Servers
- Threat Detection Disabled for SQL Servers
- Threat Detection Alerts Disabled for SQL Servers
- Send Threat Detection Alerts Disabled for SQL Servers
- Short Threat Detection Retention Period for SQL Servers
- Short Threat Detection Retention Period for SQL Servers
- Short Auditing Retention Period for SQL Databases
- Auditing Disabled for SQL Databases
- Threat Detection Disabled for SQL Databases
- Threat Detection Alerts Disabled for SQL Databases
- Send Threat Detection Alerts Disabled for SQL Databases
- Short Threat Detection Retention Period for SQL Databases
- Transparent Data Encryption Disabled for SQL Databases
- Ensure that AuditActionGroups in auditing is set properly
- SQL Database Servers Should Not Have Unrestricted Access
- Enable Geo-Redundant Backups
- Enable Storage Auto-Growth
- Enable In-Transit Encryption for PostgreSQL Database Servers
- Check for PostgreSQL Log Retention Period
- Enable “CONNECTION_THROTTLING” Parameter for PostgreSQL Servers
- Enable “LOG_CHECKPOINTS” Parameter for PostgreSQL Servers
- Enable “LOG_CONNECTIONS” Parameter for PostgreSQL Servers
- Enable “LOG_DISCONNECTIONS” Parameter for PostgreSQL Servers
- Enable “LOG_DURATION” Parameter for PostgreSQL Servers
- Enable log_checkpoints Parameter for PostgreSQL Flexible Servers
- Enable Infrastructure Double Encryption
- Enable Automatic Failover
- Restrict Default Network Access for Azure Cosmos DB Accounts
- MySQL Database Server Should Enforce SSL Connection
- Check for TLS Protocol Latest Version
- Enable In-Transit Encryption for Redis Cache Servers
- Ensure TLS Version Is Set To TLSV1.2 For MySQL Flexible Database Server
- Ensure That Azure Active Directory Admin Is Configured
- Ensure SQL Server TDE Protector Is Encrypted With CMK
- Ensure That Vulnerability Assessment Is Enabled On SQL Server By Setting Storage Account
- Ensure That Vulnerability Assessment Setting Periodic Recurring Scans Is Set To On
- Ensure That Vulnerability Assessment Setting Send Scan Reports To Is Configured
- Ensure Vulnerability Assessment Setting To Send Email Notifications To Admins And Subscription Owners Is Set
- Enable Auto-Failover Groups By Server
- Check For Sufficient Point In Time Restore (PITR) Backup Retention Period
- Check For Publicly Accessible SQL Servers
- Enable Automatic Tuning For SQL Database Servers