Azure Policy Limitation for SQL MI Databases
Read OriginalThis technical article details a known but unresolved limitation in Azure SQL Managed Instance (SQL MI). It explains that Azure Policies (including Deny or DeployIfNotExists effects) are only applied to databases created via the Azure Resource Manager API (Portal, PowerShell, CLI, Bicep). Databases created directly via SQL Server Management Studio (SSMS) bypass these policies at creation, creating security and compliance gaps. The author shares their findings, demonstrates the issue, and suggests workarounds like using Azure Functions for enforcement.
Comments
No comments yet
Be the first to share your thoughts!
Browser Extension
Get instant access to AllDevBlogs from your browser