Azure-SecurityCenter-Monitor-SQL-Encryption
Severity: Medium
Description: This control ensures that Transparent Data Encryption' is enabled for a threat detection policy on a SQL server. SQL Database transparent data encryption helps protect against the threat of malicious activity by performing real-time encryption and decryption of the database, associated backups, and transaction log files at rest without requiring changes to the application.
Remediation Steps:
Perform following to update SQL data encryption parameters:
Login to Azure Portal using https://portal.azure.com.
Go to SQL databases service.
Select DB instance to configure Data Encryption.
Click on Transparent data encryption under Security section.
Set Data encryption to On.
Important:
Reference:
CIS reference: Azure Foundations Benchmark v1.3.0 - 02-01-2021 : Recommendation #4.1.2
Blue Hexagon Proprietary