Skip to content

Commit ee03d68

Browse files
Enhance security guidance for audit logs
Added a note on the sensitivity of DevOps Audit Logs and customer responsibilities for securing them.
1 parent 54e0d64 commit ee03d68

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

azure-sql/database/auditing-microsoft-support-operations.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,16 @@ AzureDiagnostics
3737

3838
You have the option of choosing a different storage destination for this auditing log, or use the same auditing configuration for your server.
3939

40+
### Note
41+
42+
DevOps Audit Logs stored in **Microsoft Azure Storage** may contain sensitive operational details. If accessed by a malicious actor within the customer environment, could gain insights into system operations, which may lead to unauthorized access or data breaches.
43+
44+
**Customer Responsibility:**
45+
Secure these logs by:
46+
- Restricting access to authorized personnel only.
47+
- Applying strong Azure RBAC and network controls.
48+
- Monitoring and auditing storage access regularly.
49+
4050
## Related content
4151

4252
- [Auditing for Azure SQL Database and Azure Synapse Analytics](auditing-overview.md)

0 commit comments

Comments
 (0)