Ensure Public Network Access is Disabled for Azure Database for MySQL
Why This Matters
Publicly accessible Azure Database for MySQL servers are exposed to internet-based threats such as brute force attacks, unauthorized access attempts, and data exfiltration. Disabling public network access ensures that only traffic from approved private endpoints can reach your database, reducing the attack surface and aligning with a zero-trust network model for sensitive data workloads.
What Aether365 Checks
Aether365 verifies that the "Public Network Access" setting is disabled for each Azure Database for MySQL flexible server instance. This check appears in the Aether365 dashboard under the azure-database-for-mysql checks section and flags any server where public access remains enabled.