Benchmark: 5.3 Azure Database for MySQL
Overview
This section covers security best practice recommendations for Azure MySQL Database Servers.
Azure Product Page: https://azure.microsoft.com/en-us/products/mysql/
RETIREMENT of Azure MySQL Single Server: Azure MySQL Single Server is slated for retirement by September 16, 2024. Azure MySQL Flexible Server is the newer deployment standard and is unaffected. Please use these resources to consider and prepare for migration:
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-complianceStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select 5.3 Azure Database for MySQL.
Run this benchmark in your terminal:
powerpipe benchmark run azure_compliance.benchmark.cis_v300_5_3Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_compliance.benchmark.cis_v300_5_3 --shareControls
- 5.3.1 Ensure server parameter 'require_secure_transport' is set to 'ON' for MySQL flexible server
- 5.3.2 Ensure server parameter 'tls_version' is set to 'TLSv1.2' (or higher) for MySQL flexible server
- 5.3.3 Ensure server parameter 'audit_log_enabled' is set to 'ON' for MySQL flexible Server
- 5.3.4 Ensure server parameter 'audit_log_events' has 'CONNECTION' set for MySQL flexible Server