The following best practices should be employed for SQL databases:
- Ensure Transparent Data Encryption (TDE) is enabled
- Use a centralized identity management system for authentication and authorization
- Restrict access by IP, and only give access to those that need it
However, you should avoid the following:
- Don't open all IPs through your firewall
Using Azure AD gives you access to the following features:
- Single source for password rotation
- Manage permissions with groups
- Multi-factor Authentication (MFA)
