Ensure that 'Auditing' Retention is 'greater than 90 days'
Why This Matters
Without a retention period greater than 90 days, SQL Server audit logs may be deleted before they can be analyzed for security incidents. Short retention periods limit your ability to investigate historical anomalies, identify misuse, or reconstruct events during a breach investigation. Extending retention ensures you maintain a sufficient audit trail for compliance and forensic analysis.
What Aether365 Checks
This verification confirms that the audit log retention setting for each Azure SQL Server is configured to be greater than 90 days. It appears in the Aether365 dashboard under the azure-sql-server checks section.