Covers security recommendations to follow to set general database services policies on an Azure Subscription. Subsections will address specific database types.

Azure > CIS v2.0

Azure > CIS v2.0 > 04 - Database Services

Azure > Management Group

Azure > Subscription

Azure > Tenant

Turbot > Folder

Turbot

Turbot > IAM > Turbot Identity

Turbot > IAM > Unidentified Identity

Azure > Active Directory > Directory

Kubernetes > Cluster

GCP > Project

GitHub > Repository

AWS > Account

ServiceNow > Instance

GCP > Compute Engine > Disk

GCP > Compute Engine > Image

GCP > Compute Engine > Instance

GCP > Compute Engine > Region Disk

GCP > Compute Engine > Snapshot

GCP > Composer > Environment

GCP > Network > Forwarding Rule

GCP > Network > Global Forwarding Rule

GCP > Network > VPN Tunnel

GCP > Bigtable > Instance

GCP > BigQuery > Dataset

GCP > BigQuery > Table

GCP > Memorystore > Instance

GCP > Spanner > Instance

GCP > DNS > Managed Zone

GCP > Vertex AI > Endpoint

GCP > KMS > Crypto Key

GCP > Kubernetes Engine > Region Cluster

GCP > Kubernetes Engine > Zone Cluster

GCP > Dataplex > Lake

GCP > Dataplex > Task

GCP > Dataplex > Zone

GCP > Storage > Bucket

GCP > Secret Manager > Secret

GCP > SQL > Instance

GCP > Dataproc > Cluster

GCP > Dataproc > Job

GCP > Dataproc > Workflow Template

GCP > Pub/Sub > Snapshot

GCP > Pub/Sub > Subscription

GCP > Pub/Sub > Topic

GCP > App Engine > Service

Azure > AKS > Managed Cluster

Azure > DNS > Zone

Azure > DNS > Record Set

Azure > PostgreSQL > Flexible Server

Azure > PostgreSQL > Server

Azure > Monitor > Action Group

Azure > Monitor > Metric Alert

Azure > SQL > Database

Azure > SQL > Elastic Pool

Azure > SQL > Managed Instance

Azure > SQL > Server

Azure > Container Registry > Registry

Azure > Firewall > Firewall

Azure > Data Factory > Factory

Azure > Managed Identity > User Assigned Identity

Azure > Storage > Storage Account

Azure > Log Analytics > Log Analytics Workspace

Azure > Databricks > Workspace

Azure > SQL Virtual Machine Service > SQL Virtual Machine

Azure > Cosmos DB > Database Account

Azure > Relay > Namespace

Azure > Automation > Automation Account

Azure > Automation > Runbook

Azure > Service Bus > Namespace

Azure > Key Vault > Vault

Azure > SignalR Service > SignalR

Azure > Network Watcher > Network Watcher

Azure > Synapse Analytics > SQL Pool

Azure > Synapse Analytics > Workspace

Azure > Resource Group

Azure > Application Insights > Application Insight

Azure > App Service > App Service Plan

Azure > App Service > Web App

Azure > Search Management > Search Service

Azure > MySQL > Flexible Server

Azure > MySQL > Server [Deprecated]

Azure > Recovery Service > Vault

Azure > Load Balancer > Load Balancer

Azure > Network > Application Security Group

Azure > Network > Bastion Host

Azure > Network > Express Route Circuits

Azure > Network > Network Interface

Azure > Network > Network Security Group

Azure > Network > Private DNS Zones

Azure > Network > Private Endpoints

Azure > Network > Public IP Address

Azure > Network > Route Table

Azure > Network > Virtual Network

Azure > Network > Virtual Network Gateway

Azure > Network > Private Link Service

Azure > Compute > Availability Set

Azure > Compute > Disk

Azure > Compute > Disk Encryption Set

Azure > Compute > Image

Azure > Compute > Snapshot

Azure > Compute > Ssh Public Key

Azure > Compute > Virtual Machine

Azure > Compute > Virtual Machine Scale Set

AWS > Amplify > App

AWS > Lambda > Function

AWS > Directory Service > Directory

AWS > Data Pipeline > Pipeline [Deprecated]

GCP > Folder

AWS > Region

AWS > EC2 > Instance

Control: Azure > CIS v2.0 > 04 - Database Services

Category

In Your Workspace

Developers