-1

Through SSMS, connecting to my on prem server, you can right click a database, select tasks and "DEPLOY DATABASE TO MICROSOFT AZURE SQL DATABASE". Is there a way to log/audit who did this from my on prem server?

After doing this, I've checked the SQL Server logs and do not see any entries for this.

Thanks!

Joy
  • 1,171
  • 9
  • 15
Scott D
  • 1
  • 1
  • 1
    This process creates a bacpac file on my local machine. Does SQL log who created a bacpac file? – Scott D Aug 10 '22 at 01:02

1 Answers1

1

You should be able to investigate the logs using power-BI content pack refer below link. https://powerbi.microsoft.com/fr-be/blog/monitor-azure-audit-logs-with-power-bi/

You can also use Azure Activity Log API to check the resource changes refer API link below for details - https://learn.microsoft.com/en-us/rest/api/monitor/activity-logs/list?tabs=HTTP

Example screenshot containing fields available for analysis

A Modgil
  • 260
  • 1
  • 7
  • My on prem is not Azure. – Scott D Aug 09 '22 at 22:44
  • 1
    @ScottD I think the point is that if it was deployed to Azure, then the Azure logs could potentially tell you who deployed it to Azure. Whether the deployment was done from on prem or in another cloud resource, the Azure logs should tell you who created those objects in Azure. – trenton-ftw Aug 10 '22 at 01:29
  • i agree with Trent – A Modgil Aug 10 '22 at 01:38
  • @Trenton-ftw, understandable. What if a developer copied my on prem database to their azure environment that I have no control over and can't view their logs? Is that copy logged in transaction files or anywhere on my machine? I've also found that if a developer was to create a dacpac file through Export Data Tier Application, I don't see it logged in the SQL logs. Thanks for your help! – Scott D Aug 10 '22 at 15:17