Microsoft Defender for Cosmos DB is Now Available in Public Preview
Microsoft has announced the public preview of Microsoft Defender for Azure Cosmos DB, a new database protection solution for enterprise customers. The latest security offering allows organizations to constantly monitor and protect their cloud workloads against the most common critical threats across databases.
“The new cloud workload protection capabilities are designed as an Azure-native layer of security, that detect attempts to exploit databases in your Azure Cosmos DB accounts based on the most common attack techniques and known bad actors—enabling security teams to detect and respond to these threats more effectively, using the Microsoft Defender for Cloud toolset,” the company explained.
More specifically, this new security solution protects Cloud Cosmos DB accounts from the most critical threats, including SQL injections. The SQL injection attack is one of the most popular attack techniques that the threat actors use to access sensitive information such as user credentials and credit card details.
Microsoft Defender for Azure Cosmos DB can also block unusual and potentially harmful attempts to access account access keys. Additionally, it can detect suspicious behavior patterns that can potentially lead to malicious insiders, leaked keys, as well as compromised identities. You can find the full list of Defender for Azure Cosmos DB alerts on this support page.
How to configure Microsoft Defender for Cosmos DB
Microsoft says that IT Admins will be able to set up the Microsoft Defender for Cosmos DB protection by following the steps mentioned below:
- First of all, open the Azure portal.
- Head to the Settings menu and then select the Microsoft Defender for Cloud option.
- Finally, turn on the toggle button available in the Microsoft Defender for Cloud configuration blade and click the Save button.
Microsoft noted that Microsoft Defender for Cosmos DB support is currently only available in public preview for the Core (SQL) API. As of this writing, the new cloud workload protection capabilities are not available for Azure government and sovereign cloud customers.
More in Security
Atlassian Releases Patches for Critical Authentication Vulnerability in Jira Software
Feb 6, 2023 | Rabia Noureen
What is Microsoft Sentinel and How Does It Protect Cloud and On-Premises Resources?
Feb 2, 2023 | Mustafa Toroman
Microsoft Warns About New Consent-Phishing Attacks Used to Steal Data
Feb 1, 2023 | Rabia Noureen
Microsoft Defender for Endpoint Adds Device Isolation Support for Linux Machines
Jan 31, 2023 | Rabia Noureen
Git Releases New Security Updates to Block Remote Code Execution Attacks
Jan 18, 2023 | Rabia Noureen
PyTorch Discloses Internal Dependency Compromised with Malicious Code
Jan 4, 2023 | Rabia Noureen
Most popular on petri