Severity : Medium
Description: This control ensures that Azure backup recovery service have recovery points retention to successfully restore the SQL Database. Azure backup service provides automatic backup which creates recovery points for the VM. The retention of these recovery points are driven by the retention periods for the backup. The initial backup is full backup and subsequent backups are incremental backup. When the recovery points have the retention periods expires, they are merged to next recovery points. If a recovery point is deleted before the next one created , the recovery mechanism will be broken as previous data has already been deleted. Automated backups of SQL databases with recent restore points help ensure that database recovery operations can occur without significant data loss.
Remediation Steps: Ensure that each SQL database has automated backups configured with a sufficient retention period and that the last known backup operation completes successfully.:
Perform following to configure retention period for recovery point :
Login to Azure Portal usingĀ https://portal.azure.com.
Navigate to All services.
Filter for SQL databases, select the SQL database.
From the list of SQL databases , Select the reported database.
On Overview, Select Restore.
If no Point-in-time or long-term backup available, it requires backup configuration
On the data base, Select Backup policy.
Update the Retention Range for the back up policy to make sure that it beyond the backup period.
Select OK.
Important:
Reference: