Securing Azure-Arc Enabled Data Services

Explore Azure Arc-enabled Data Services security in this 26-minute session from Microsoft Build 2022. Gain an overview of security features, comparing Azure to traditional SQL servers, and learn about deployment permissions and necessary certifications. Dive into authentication and authorization methods, including SQL Linux container authentication with Keytab files and enabling Active Directory authentication for SQL Managed Instances. Watch demonstrations on deploying Arc-enabled SQL Managed Instances with customer-managed and system-managed keytabs, as well as reading keytab information from Azure Key Vault. Understand how user and group creation works in this environment, similar to other SQL versions.

Introduction.
Mélony Qin, Program Manager, Microsoft Azure Data.
Security features comparisons between Azure versus a traditional SQL server.
How Azure ensures proper Deployment Permissions.
Certifications that should be used.
What authentications and authorizations are used?.
SQL Linux containers auth with Keytab file.
Arcenabled SQL Managed Instance.
Enable Active Directory (AD) Authentication.
Demo; Deploying Arcenabled SQL Managed Instance in Active Directory (AD) with customer managed keytab (CMK) .
Demo; Reading keytab information from Azure Key Vault (AKV).
Demo; Deploying Arcenabled SQL Managed Instance in Active Directory (AD) with system managed keytab .
Authorization; Can users and groups be created like any other version of SQL?.