STIGQter: STIG Summary: Microsoft Azure SQL Managed Instance Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Sep 2025:

Azure SQL Managed Instance must be able to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

DISA Rule

SV-276252r1149665_rule

Vulnerability Number

V-276252

Group Title

SRG-APP-000357-DB-000316

Rule Version

MSQL-00-010900

Severity

CAT II

CCI(s)

• CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

10

Fix Recommendation

Review the Azure SQL Managed Instance Audit file configuration information:
https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/auditing-configure?view=azuresql

Check Contents

Run the following query:

SELECT name AS 'Audit Name',
status_desc AS 'Audit Status',
audit_file_path AS 'Current Audit File'
FROM sys.dm_server_audit_status
WHERE name NOT IN ('admin_audit','SqlDbThreatDetection_ServerAudit')

If no records are returned or the audit_file_path is NULL, this is a finding.

Vulnerability Number

V-276252

Documentable

False

Rule Version

MSQL-00-010900

Severity Override Guidance

Run the following query:

SELECT name AS 'Audit Name',
status_desc AS 'Audit Status',
audit_file_path AS 'Current Audit File'
FROM sys.dm_server_audit_status
WHERE name NOT IN ('admin_audit','SqlDbThreatDetection_ServerAudit')

If no records are returned or the audit_file_path is NULL, this is a finding.

Check Content Reference

M

Target Key

5711