liveBook · Manning

Advanced threat protection

As explained in Microsoft Azure in Action

Advanced threat protection is a security capability that analyzes database activity to detect anomalous or potentially malicious behavior.

Advanced threat protection analyzes database activity with machine learning, learns what is normal, and raises alerts when behavior falls outside that pattern. section 10.3.1

Azure SQL Database treats this capability as a sophisticated security feature, but enabling it can increase costs alongside options such as geo-replication. section 10.3.1

Banning Books

For the Banning Books inventory and ordering system, Azure SQL Database combines strong security with performance and disaster-recovery capabilities, making advanced threat protection part of a broader database choice. section 10.3.1 section 10.3.4

Table 10.3 Pros and cons of using the Azure SQL DB considering the Banning Books requirements

Requirement

Pros

Cons

Performance

Built-in performance tuning and automated indexing for fast response times. Automatic scaling to handle varying loads.

While generally performant, it may not be as efficient as other options for certain workloads, especially those requiring high customization or those not well suited to a relational database model.

Costs

Pay As You Go (PAYG) model allows for cost control. Reserved capacity pricing can provide significant savings for long-term usage. The serverless compute tier can automatically pause during inactive periods, reducing compute costs.

Can be more expensive than other options, especially for larger databases or higher performance tiers. Costs can increase if premium features such as geo-replication or advanced threat protection are used.

Disaster recovery

Provides automated backups and supports geo-replication. These features ensure resilience to failures and quick data recovery in case of a disaster.

While the built-in disaster recovery features are robust, they may increase costs, especially if geo-replication is used. The backup retention period is limited, and additional backup strategies may be needed for longer-term data retention.

Security

Advanced security features, including always-on encryption, firewall rules, and advanced threat protection. Built-in auditing and compliance reports help meet regulatory requirements.

Requires proper configuration to ensure security. Misconfigurations can lead to security vulnerabilities. Advanced security features may increase costs.

Compare advanced threat protection with other Azure SQL Database capabilities while weighing security benefits against pricing and workload requirements. section 10.3.1

How Microsoft Azure in Action covers it

How deep it goes
Explains machine-learning-based anomaly alerts and cost implications without detailing configuration or detection internals.
Examples
Uses the Banning Books inventory and ordering workload to compare database security, cost, performance, and disaster recovery.
What you can do after
Evaluate database options by balancing advanced threat protection against security needs, workload requirements, and additional cost.
How it connects
Connects Azure SQL Database with machine learning, geo-replication, and Azure Database for PostgreSQL.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Microsoft Azure in Action. The section links point to the parts of the book it draws on.