STIGQter: STIG Summary: Microsoft Azure SQL Managed Instance Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Sep 2025:

Azure SQL Managed Instance must initiate session auditing upon startup.

DISA Rule

SV-276243r1149638_rule

Vulnerability Number

V-276243

Group Title

SRG-APP-000092-DB-000208

Rule Version

MSQL-00-004700

Severity

CAT II

CCI(s)

CCI-001464 - Initiates session audits automatically at system start-up.

Weight

Fix Recommendation

Configure the SQL Audit(s) to automatically start during system start-up.

ALTER SERVER AUDIT [] WITH STATE = ON

Execute the following query:

SELECT name AS 'Audit Name', status_desc AS 'Audit Status', audit_file_path AS 'Current Audit File' FROM sys.dm_server_audit_status WHERE status_desc = 'STARTED'

Ensure the SQL STIG Audit is configured to initiate session auditing upon startup.

Check Contents

When Audits are enabled, they start up when the audits are enabled and remain operating until the audit is disabled.

Check if an audit is configured and enabled.

To determine if session auditing is configured and enabled, follow the instructions below:

Run this TSQL command to determine if SQL Auditing is configured and enabled:

SELECT name AS 'Audit Name', status_desc AS 'Audit Status', audit_file_path AS 'Current Audit File'
FROM sys.dm_server_audit_status WHERE status_desc = 'STARTED'

All currently defined audits for the Azure SQL Managed Instance will be listed.

If no audits are returned, this is a finding.

Vulnerability Number

V-276243

Documentable

False

Rule Version

MSQL-00-004700

Severity Override Guidance

Check Content Reference

Target Key

5711