Events
May 19, 6 PM - May 23, 12 AM
Calling all developers, creators, and AI innovators to join us in Seattle @Microsoft Build May 19-22.
Register todayProtect your databases with Defender for Databases
Defender for Databases in Microsoft Defender for Cloud helps you protect your entire database estate. It provides attack detection and threat response for the most popular database types in Azure. Defender for Cloud protects database engines and data types based on their attack surface and security risks.
Database protection includes:
- Microsoft Defender for Azure SQL databases
- Microsoft Defender for SQL servers on machines (You can also enable on a Log Analytics workspace)
- Microsoft Defender for open-source relational databases
- Microsoft Defender for Azure Cosmos DB
These four database protection plans are priced separately. Find more info about Defender for Cloud's pricing on the pricing page.
You need a Microsoft Azure subscription. If you don't have an Azure subscription, sign up for a free subscription.
You must enable Microsoft Defender for Cloud on your Azure subscription.
Connect your non-Azure machines, Amazon Web Service (AWS) account, or Google Cloud Platform (GCP) projects.
Enabling database protection activates all four Defender plans and protects all supported databases on your subscription.
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud.
In the Defender for Cloud menu, select Environment settings.
Select the relevant Azure subscription, AWS account, or GCP project.
On the Defender plans page, switch the Databases plan to On.
Enabling database protection activates the following four Defender plans:
- Defender for Azure SQL databases
- Defender for SQL server on machines (You can also enable on a Log Analytics workspace)
- Defender for open-source relational databases
- Defender for Azure Cosmos DB
These plans protect all supported databases in your subscription.
To enable and modify each plan individually, see: