Azure Data Protection Best Practices Report

Overview

This report reviews Data Protection Best Practices across your selected Azure subscriptions using 47 enabled configuration and recommendation checks. It identifies affected resources and provides remediation guidance for failed checks.

Checks use the configuration and recommendations available for the selected subscriptions. Resources that cannot be evaluated are reported as unavailable or not applicable.

Assessment scope

• Advisor — 1 checks
• CosmosDB — 2 checks
• Data Lake Store — 1 checks
• KeyVault — 15 checks
• Monitor — 4 checks
• MySQL — 2 checks
• PostgreSQL — 2 checks
• SQL — 3 checks
• Storage — 17 checks

Example checks

• CosmosDB Account Should Use CMK To Encrypt Data At Rest
• CosmosDB Account Should Disable Key Based Metadata Write Access
• Require Encryption on Data Lake Store Accounts
• Key Vault Certificates Have Validity Period Less Than or Equal to 12 Months
• Key Vault has Firewall Enabled

Upon completion, the report lists passed and failed checks, affected resources, unavailable evidence, and actionable remediation guidance.