Azure Compliance ControlsAzure Database for MySQL
MySQL servers should have 'audit_log_enabled' set to 'ON'
This control checks MySQL servers for audit logging by evaluating the `audit_log_enabled` setting. It reports whether audit logging is present or missing, so servers without it can be identified from the results returned by the check.
What this control checks
MySQL server parameter 'audit_log_enabled' must be set to 'ON'.
Framework mappings
The clauses this control is mapped to in each framework.
- 4.4.3 Ensure server parameter 'audit_log_enabled' is set to 'ON' for MySQL Database Server
- 4.4.3 Ensure server parameter 'audit_log_enabled' is set to 'ON' for MySQL Database Server
- 4.4.3 Ensure server parameter 'audit_log_enabled' is set to 'ON' for MySQL Database Server
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
mysql_server_audit_logging_enabled - Powerpipe Control:
azure_compliance.control.mysql_server_audit_logging_enabled
Last reviewed: 2026-10-13