Ensure Microsoft Defender for open-source relational databases is enabled

Why this matters

Enabling Microsoft Defender for open-source relational databases provides built-in threat protection for MySQL, PostgreSQL, and MariaDB. It leverages threat intelligence, anomaly detection, and behavioral analytics to identify suspicious activities. Without it, these services lack advanced security monitoring, leaving data assets exposed to undetected threats.

What this check does

Check Logic

Validate that Microsoft Defender is enabled for open-source relational databases by checking if the pricing tier for this resource type is set to Standard.

Applies to

• Azure Database for MySQL
• Azure Database for PostgreSQL
• Azure Database for MariaDB

How to fix it

Azure Portal

1. Navigate to Microsoft Defender for Cloud
2. Under Management, select Environment Settings
3. Click on the relevant subscription name
4. Select the Defender plans blade
5. In the Databases row, click Select types
6. Set the toggle next to Open-source relational databases to On
7. Click Continue, then Save

Azure CLI

az security pricing create -n 'OpenSourceRelationalDatabases' --tier 'standard' 

PowerShell

Set-AzSecurityPricing -Name "OpenSourceRelationalDatabases" -PricingTier "Standard"

Exceptions

None

Further resources

• Microsoft Defender detection capabilities
• Azure REST API – Pricing
• PowerShell module: Get-AzSecurityPricing
• Azure Security Benchmark: DP-2
• Azure Security Benchmark: LT-1