Azure Compliance ControlsAzure SQL Database
SQL servers should have all threat detection types enabled
SQL Server can alert for security issues including SQL Injection, vulnerabilities, access anomalies and data exfiltration. Ensure none of these are disabled. SQL server threat detection should be enabled for all.
What this control checks
azurerm_mssql_server_security_alert_policy must not list any disabled_alerts.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
sql_server_threat_detection_all_enabled - Checkov Check:
CKV_AZURE_25 - Powerpipe Control:
azure_compliance.control.sql_server_threat_detection_all_enabled - KICS Query:
25cd1853-7e80-4106-9ac3-03f8636c25be - Trivy Check:
AZU-0028
Last reviewed: 2026-10-15