Protect your databases with Defender for Databases
Defender for Databases in Microsoft Defender for Cloud lets you protect your entire database estate with attack detection and threat response for the most popular database types in Azure. Defender for Cloud protects database engines and data types based on their attack surface and security risks.
Database protection includes:
- Microsoft Defender for Azure SQL databases
- Microsoft Defender for SQL servers on machines (You can also enable on a Log Analytics workspace)
- Microsoft Defender for open-source relational databases
- Microsoft Defender for Azure Cosmos DB
These four database protection plans are priced separately. Find more info about Defender for Cloud's pricing on the pricing page.
Prerequisites
You need a Microsoft Azure subscription. If you don't have an Azure subscription, sign up for a free subscription.
You must enable Microsoft Defender for Cloud on your Azure subscription.
Connect your non-Azure machines, AWS account or GCP projects.
Enable the Databases plan
Enabling database protection activates all four Defender plans and protects all supported databases on your subscription.
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud.
In the Defender for Cloud menu, select Environment settings.
Select the relevant Azure subscription, AWS account or GCP project.
On the Defender plans page, switch the Databases plan to On.
Enable specific plans database protections
Enabling database protection activates the following four Defender plans:
- Defender for Azure SQL databases
- Defender for SQL server on machines (You can also enable on a Log Analytics workspace)
- Defender for open-source relational databases
- Defender for Azure Cosmos DB
These plans protect all supported databases in your subscription.
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud.
In the Defender for Cloud menu, select Environment settings.
Select the relevant subscription.
On the Defender plans page, locate the Databases plan and select Select types.
In the Resource types selection window, switch the desired plans to On or Off.
(Optional) Exclude specific database resource types by toggling them to Off.
Select Continue.
Select Save.
