Network misconfigurations

Azure SQL Server Firewall allows access from all Azure Services

Risk Level

Hazardous (3)

Platform(s)
Compliance Frameworks

Description

{AzureSqlDbServer} SQL server's firewall allows access to all Azure services (by default, this configuration is disabled). This option configures the firewall to allow all connections from Azure, including connections from the subscriptions of other customers. In order to reduce the potential attacks of a SQL server, firewall rules should be defined with more restricted IP addresses by referencing the range of addresses available for a specific SQL Server.
  • Recommended Mitigation

    For each SQL server, disable 'Allow Azure Services and resources to access this server' configuration.