Azure SQL Server Security

When you create a SQL server on Azure , there is an option

"LET WINDOWS AZERI SERVICES FOR ACCESS TO THE SERVER."

Does this mean that any other application (other than my own applications) hosted on Azure as a website can access my sql server?

Of course, there is a user password, but I'm afraid that they can be rude.

Is this a legit issue?

+7
security sql-server azure
source share
1 answer

Yes, "Allow access to Azure services" is a shortcut that any server that supports Azure allows through a firewall (although the other service still needs to know the server name and username / password for SQL authentication, as you mentioned). This shortcut is for convenience, since your application IP address may change if the virtual machines in your cloud service terminate or close.

To avoid using this shortcut, you can create a reserved virtual IP address (VIP) for your cloud service. This allows your application to have a permanent public IP address that you can specifically and selectively resolve through the server firewall for your SQL database.

+10
source share

All Articles