This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Defender for Databases in Microsoft Defender for Cloud helps you protect your entire database estate. It provides attack detection and threat response for the most popular database types in Azure. Defender for Cloud protects database engines and data types based on their attack surface and security risks.
Database protection includes:
These four database protection plans are priced separately. Find more info about Defender for Cloud's pricing on the pricing page.
You need a Microsoft Azure subscription. If you don't have an Azure subscription, sign up for a free subscription.
You must enable Microsoft Defender for Cloud on your Azure subscription.
Connect your non-Azure machines, Amazon Web Service (AWS) account, or Google Cloud Platform (GCP) projects.
Enabling database protection activates all four Defender plans and protects all supported databases on your subscription.
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud.
In the Defender for Cloud menu, select Environment settings.
Select the relevant Azure subscription, AWS account, or GCP project.
On the Defender plans page, switch the Databases plan to On.
Enabling database protection activates the following four Defender plans:
These plans protect all supported databases in your subscription.
To enable and modify each plan individually, see:
Training
Module
Plan for cloud workload protections using Microsoft Defender for Cloud - Training
Plan for cloud workload protections using Microsoft Defender for Cloud
Certification
Microsoft Certified: Azure Database Administrator Associate - Certifications
Administer an SQL Server database infrastructure for cloud, on-premises and hybrid relational databases using the Microsoft PaaS relational database offerings.