Azure-SQLServer-SQL-Server-Private-Endpoints-Configured

Severity : High

Description: This control ensures that private endpoint connections on Azure SQL Database is enabled. Azure Private Endpoint is a network interface that connects you privately and securely to a service powered by Azure Private Link. Private Endpoint uses a private IP address from virtual network, effectively bringing the service into virtual network. When using private endpoints for Azure services, traffic is secured to a specific private link resource. The platform performs an access control to validate network connections reaching only the specified private link resource. This control provides an extra network security layer to resources by providing a built-in exfiltration protection that prevents access to other resources hosted on the same Azure service.

Remediation Steps:

Perform following to configure private endpoint :

Login to Azure Portal using https://portal.azure.com.
Navigate to SQL Databases.
Select the SQL Database to be remediated.
Under Security, select Private endpoint connections.
Click +Private endpoint.
Under the Basics tab, enter Project Details and Instance Details.
Select Next.
Under the Resource tab, enter Connection method, Subscription.
Select Resource type for Sql/servers.
For Resource, Select SQL server name.
Select sqlServer as Target sub-resource.
Select Next.
Under Configuration Tab, select Virtual Network , and Subnet.
Select Yes for Integrate with a private network.
Select your Subscription and Private Dns Zone.
Select Next.
Add Tags.
Select Next.
Select Create, in Review +Create.

Important:

Reference:

Create an Azure SQL server and private endpoint