Data
Database & Storage Protection
Protect business data, application databases and deployment storage with scoped access.
Database accounts
Use dedicated application database accounts with the permissions required by the application rather than using a global database administrator identity for normal runtime access.
Database exposure
Database services should normally remain private to the application environment unless a specifically secured remote architecture requires otherwise.
Runtime storage
Customer uploads, mailboxes, generated files and other runtime data should be protected separately from reproducible application code.
Sensitive information
Production data, backups and exported files may contain personal or commercially sensitive information and should be protected accordingly.