| Plugin Title | Advanced Data Security Enabled |
| Cloud | AZURE |
| Category | SQL Server |
| Description | Ensures that Advanced Data Security is enabled for SQL Servers |
| More Info | Enabling Advanced Data Security on all SQL Servers ensures that SQL server data is encrypted and monitored for unusual activity, vulnerabilities, and threats. |
| AZURE Link | https://docs.microsoft.com/en-gb/azure/sql-database/sql-database-advanced-data-security |
| Recommended Action | Ensure that Advanced Data Security is enabled for all SQL Servers. |
- Log into the Microsoft Azure Management Console.
- Select the "Search resources, services, and docs" option at the top and search for SQL servers.
- On the "SQL server" page, select the SQL server that needs to be examine.
- On the selected "SQL server" page, scroll down the left navigation panel and select "Advanced data security" under the "Security" column.
- On the "Advanced data security" page, if the "ADVANCED DATA SECURITY" is showing "OFF" then the selected "SQL server" does not ensured that SQL server data is encrypted and monitored for unusual activity, vulnerabilities, and threats.
- Repeat steps number 2 - 5 to verify other "SQL servers" in the account.
- Navigate to "SQL servers", on the "SQL servers" page select the "SQL server", scroll down the left navigation panel and choose "Advanced data security" under the "Security."
- On the "Advanced data security" page, click on the "ON" option next to the "ADVANCED DATA SECURITY". Select the "Subscription" and "Storage account" accordingly.
- Click on the "Save" button at the top to make the changes.
- Repeat steps number 7 - 9 to ensure that Advanced Data Security is enabled for all SQL Servers.
