Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Does setting SQL Azure rule "WINDOWS AZURE SERVICES"=YES mean anyone on azure can connect to my server?

In the SQL Azure management console when administering a Server you have an option to set the "allowed ip addresses" and also "allowed services". Within "allowed services" you can allow WINDOWS AZURE SERVICES but what does this mean exactly? Specifically, does this mean anyone else running a VM on Azure can connect to my server (assuming they know the username & password)? Or is there some other restriction like only azure services running within the same Subscription can connect, or only Linked Resources?

like image 812
Rory Avatar asked Nov 29 '12 11:11

Rory


People also ask

How do I allow Azure services to access SQL Server?

Sign in to the Azure portal. Search for and select SQL servers, and then select your server. Under Security, select Networking. Under the Public access tab, ensure Public network access is set to Select networks, otherwise the Virtual networks settings are hidden.

How do I restrict access to Azure SQL Database?

In the Azure portal, select SQL databases from the left-hand menu, and select your database on the SQL databases page. In the Security section, select Transparent data encryption. If necessary, set Data encryption to ON. Select Save.


1 Answers

"WINDOWS AZURE SERVICES" means exactly what you suspect - anyone running any kind of service in Windows Azure (Azure WebSites, Azure Cloud Services/web/worker roles, Azure Virtual Machines) can access your SQL Database. But in order to really connect to your database, one must know all of:

  • Name of your Windows Azure SQL Server (unique for you) (something like: xxx99yyy.database.windows.net)
  • (Name of your Database to connect to)
  • Login for the database
  • Password for the database

Linked resources are only for visually help you organize all resources around a single application and some other light stuff.

like image 109
astaykov Avatar answered Sep 26 '22 00:09

astaykov