​
Event Information

  1. The Microsoft.DBforMariaDB.servers.delete event in Azure for Azure Database Service indicates that a request has been made to delete a MariaDB server instance in Azure.
  2. This event signifies that the deletion process for the MariaDB server has been initiated and is in progress.
  3. It is important to note that this event does not necessarily mean that the server has been completely deleted, as there might be additional steps or processes involved in the deletion workflow.

​
Examples

  1. Unauthorized deletion: If security is impacted with Microsoft.DBforMariaDB.servers.delete in Azure for Azure Database Service, one example could be an unauthorized user gaining access to the Azure portal or API and deleting a MariaDB server. This could result in the loss of critical data and disruption of services.

  2. Lack of access controls: Another example could be the absence of proper access controls and permissions on the Azure Database Service. If the necessary security measures are not in place, any user with sufficient privileges could potentially delete a MariaDB server, leading to security breaches and data loss.

  3. Insider threat: A third example could involve an insider threat scenario, where a malicious or disgruntled employee with legitimate access to the Azure environment intentionally deletes a MariaDB server. This could be done to cause harm to the organization, disrupt operations, or steal sensitive data. Implementing proper monitoring and auditing mechanisms can help detect and mitigate such risks.

​
Remediation

​
Using Console

To remediate the issues for Azure Database Service using the Azure console, you can follow these step-by-step instructions:

  1. Enable auditing for Azure SQL Database:

    • Go to the Azure portal and navigate to the Azure SQL Database service.
    • Select the specific database you want to enable auditing for.
    • In the left-hand menu, under the Security section, click on “Auditing”.
    • Click on “Enable” to enable auditing for the database.
    • Configure the desired audit settings, such as storage account, retention period, and events to audit.
    • Click on “Save” to apply the changes.

  2. Enable encryption at rest for Azure SQL Database:

    • Go to the Azure portal and navigate to the Azure SQL Database service.
    • Select the specific database you want to enable encryption for.
    • In the left-hand menu, under the Security section, click on “Transparent data encryption”.
    • Click on “Enable” to enable encryption at rest for the database.
    • Wait for the encryption process to complete, which may take some time depending on the database size.
    • Once the encryption is enabled, the status will change to “Enabled”.

  3. Enable Azure Security Center recommendations:

    • Go to the Azure portal and navigate to the Azure Security Center.
    • In the left-hand menu, click on “Recommendations”.
    • Review the list of recommendations provided by Azure Security Center for your Azure resources.
    • Locate the recommendations related to Azure Database Service and click on them to view the details.
    • Follow the recommended steps provided by Azure Security Center to remediate the identified issues.
    • Once the remediation steps are completed, the recommendation status will change to “Remediated”.

Please note that the specific steps may vary slightly depending on the Azure portal version and interface changes. It is always recommended to refer to the official Azure documentation for the most up-to-date instructions.

​
Using CLI

To remediate issues related to Azure Database Service using Azure CLI, you can follow these steps:

  1. Enable auditing for Azure SQL Database:

    • Use the az sql server update-auditing command to enable auditing for the Azure SQL Server.
    • Specify the necessary parameters such as --state Enabled and --storage-account resource_id to configure auditing.
    • Example command: az sql server update-auditing --resource-group <resource_group_name> --server <server_name> --state Enabled --storage-account <storage_account_resource_id>

  2. Enable diagnostic settings for Azure SQL Database:

    • Use the az monitor diagnostic-settings create command to enable diagnostic settings for the Azure SQL Database.
    • Specify the necessary parameters such as --name, --resource-id, and --logs to configure diagnostic settings.
    • Example command: az monitor diagnostic-settings create --name <diagnostic_settings_name> --resource <database_resource_id> --logs '[{"category": "SQLSecurityAuditEvents", "enabled": true}]'

  3. Enable threat detection for Azure SQL Database:

    • Use the az sql db threat-policy update command to enable threat detection for the Azure SQL Database.
    • Specify the necessary parameters such as --name, --resource-group, and --storage-account to configure threat detection.
    • Example command: az sql db threat-policy update --name <database_name> --resource-group <resource_group_name> --storage-account <storage_account_resource_id> --state Enabled

​
Using Python

To remediate issues related to Azure Database Service using Python, you can follow these steps:

  1. Monitor and alert on database service events:

    • Use the Azure Monitor service to set up alerts for specific events or metrics related to your Azure Database Service.
    • Create an alert rule using the Azure SDK for Python to trigger an action when a specific event occurs.
    • Use the Azure Event Grid service to publish events to a topic and subscribe to those events using Python to take necessary actions.

  2. Automate database backups:

    • Use the Azure SDK for Python to create a script that automates the backup process for your Azure Database Service.
    • Set up a scheduled task or a cron job to run the script at regular intervals.
    • Ensure that the script includes error handling and logging to capture any issues during the backup process.

  3. Implement security best practices:

    • Use the Azure SDK for Python to configure firewall rules and virtual network service endpoints to restrict access to your Azure Database Service.
    • Enable auditing and threat detection for your database service using the Azure SDK for Python to detect and respond to potential security threats.
    • Regularly review and update the access control policies for your Azure Database Service using Python scripts to ensure compliance with security standards.

Please note that the provided examples are conceptual and may require customization based on your specific requirements and the Azure Database Service you are using.