Azure_SQLServers_2
Configure the ‘ AuditActionGroups ‘ property to appropriate groups to capture all the critical activities on the SQL Server and all the SQL databases hosted on the SQL server.
On Azure Console, There is no Provision to check or change AuditActionGroup property.
Perform the following in Azure PowerShell:
To create Audit profile with prescribed ‘ AuditActionGroup ‘.
Set-AzureRmSqlServerAuditingPolicy -ResourceGroupName <resourceGroup> -ServerName <serverName> -StorageAccountName storageAccountName -AuditActionGroup SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP -RetentionInDays <number >= 90>
References: