Azure Database Best Practices Report

Overview

This report reviews Database Best Practices across your selected Azure subscriptions using 81 enabled configuration and recommendation checks. It identifies affected resources and provides remediation guidance for failed checks.

Checks use the configuration and recommendations available for the selected subscriptions. Resources that cannot be evaluated are reported as unavailable or not applicable.

Assessment scope

• Advisor — 6 checks
• CosmosDB — 7 checks
• Kusto — 4 checks
• MariaDB — 4 checks
• MySQL — 12 checks
• PostgreSQL — 24 checks
• Redis — 8 checks
• SQL — 12 checks
• Synapse — 4 checks

Example checks

• CosmosDB Account Should Use CMK To Encrypt Data At Rest
• CosmosDB Account Should Disable Key Based Metadata Write Access
• Cosmos DB account 'Access Control' should be configured to use Azure Active Directory (AAD) and Role-Based Access Control (RBAC)
• CosmosDB Account Use Private Link
• CosmosDB Account Has Virtual Network Filter Enabled

Upon completion, the report lists passed and failed checks, affected resources, unavailable evidence, and actionable remediation guidance.