V-276295
Microsoft Azure SQL Managed Instance Security Technical Implementation Guide
Title
Azure SQL Managed Instance must be configured to generate audit records for DOD-defined auditable events within all DBMS/database components.
Description
<VulnDiscussion>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. Audit records can be generated from various components within Azure SQL Managed Instance (e.g., process, module). Certain specific application functionalities may be audited as well. The list of audited events is the set of events for which audits are to be generated. This set of events is ty...
Fix Text (Documentation Requirement)
Add all required audit events to the STIG Compliant audit specification server documentation. Refer to the supplemental file "AzureSQLMIAudit.sql" script. Reference: https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/auditing-configure?view=azuresql