MEDIUM

Ensure Azure SQL data masking is configured

Dynamic data masking should be configured for sensitive columns.

Security Impact

Without masking, sensitive data is visible to non-privileged users.

How to Remediate

Configure data masking rules for PII and sensitive data columns.

Affected Resources

Microsoft.Sql/servers/databases/dataMaskingPolicies

Compliance Frameworks

SOC 2PCI-DSSGDPR

How TigerGate Helps

TigerGate continuously monitors your Azure environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Azure SQL Database resources across your Azure subscriptions every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for SOC 2, PCI-DSS, GDPR compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
azure-sql-12
Service
Azure SQL Database
Category
Data Protection
Severity
MEDIUM

Automate This Check

TigerGate automatically scans your Azure environment for this and 160+ other security checks.

Start Free Trial