Best practice rules for MySQL
- Configure Audit Log Events for MySQL Flexible Servers
Ensure that the "audit_log_events" configuration parameter includes "CONNECTION".
- Configure TLS Version for MySQL Flexible Database Servers
Ensure that the 'tls_version' parameter is set to a minimum of 'TLSV1.2' for all MySQL flexible database servers.
- Enable Audit Logging for MySQL Flexible Servers
Ensure that "audit_log_enabled" configuration parameter is enabled for Azure MySQL flexible servers.
- Enable In-Transit Encryption for MySQL Servers
Ensure that in-transit encryption is enabled for your Azure MySQL database servers.
- Enable Transport Encryption for MySQL Flexible Servers
Ensure that "require_secure_transport" parameter is enabled for Azure MySQL flexible servers.