Legally speaking, they can't read your data or send your data to law enforcement without a correct court order.
Requests for customer data
Government requests for customer data must
comply with applicable laws. A subpoena or its local equivalent is
required to request non-content data, and a warrant, court order, or
its local equivalent, is ...
You are putting your data on Somebody Else's Computer, and the data can be accessed in some way. In other words, the answer to your exact question is almost surely: Yes, some Microsoft employees can see your data but make an active choice not to perform the tasks that would let them do so.
A wider question is how large the risk actually is for leaks of such ...
I state this from experience because I used to work there.
Internally Microsoft is very strict about protecting the data of users and customers, and unlike some other big well-known WEB outfits, Microsoft explicitly does NOT scan the contents of user's private files (eg your Hotmail.com Email, your VM's data files) to be used for marketing or advertising.
Can they? Yes, the data is on their servers, which they control.
Will they? Probably not, except if they have a reason (usually legal and you have nice answer about that - also keep in mind that there are legal cases they cannot disclose). The probability depends on how your data is interesting or problematic.
Is what they get usable? That part depends on ...
I've not found exact details about Microsoft's internal access
policies, but they do give general information in their brochure
"Privacy Considerations in the Cloud" (PDF download, linked
from their Privacy at Microsoft page:
Microsoft adheres to stringent policies and procedures when it comes
to accessing your data. We have automated a majority of our ...
I test in my lab, I use the same image, I get the same result with you. It seems the command does not work with this image. I test on image Windows Server 2016, the command works.
Now, PowerShell in Azure Cloud Shell is in preview, you could give feedback on this link.
On Azure Cloud Shell, if you want to connect your VM, maybe you could use Enter-...
No, it's not currently possible to join an Azure SQL instance to a vNet. This user voice item says it's planned, but that's been in that state for some time (yes I know the title mentions VPN but it is really talking about vNet).
I am addressing the "rogue employee" aspect only.
The vast majority of Microsoft employees do not have access to your data.
The few that do still need to jump through some hoops to request access to it.
I am a former Microsoft employee. The few times I did get access to user data, it was with the knowledge and agreement of the customer.
This error is usually caused by a lack of permissions.
As you are creating a bacpac file to transfer a database to azure, we can rule out permissions on the target server.
Which means you are most likely missing permission to read the login definitions on the source server.
You will need to grant your user VIEW DEFINITION ON LOGIN permissions, or add him ...
There are really two approaches you can take with this:
Azure SQL Data Warehouse
Azure SQL Elastic Database
Azure SQL data warehouse takes a similar approach to what you are doing now, using VM's running SQL but couples that with Azure Storage and a control layer to help you spread your data over multiple nodes and multiple storage locations. It also ...
Two easy options:
You can run programs or scripts in WebJobs in Azure App Service web app. Any script written in The following file types are accepted:
.cmd, .bat, .exe (using windows cmd)
.ps1 (using powershell)
.sh (using bash)
.php (using php)
.py (using python)
.js (using node)
.jar (using java)
If you're using SQL all on Azure VMs I.e. not Azure SQL Database as a Service, then I would suggest going for all connections across a private network - to the Database tier at least.
As another measure of security, then yes look out to using SQL Always Encrypted, but it does mean that each client which connects to the SQL Server, does need the SSL ...
The example provided on the MS site assumes you have the "Allow access to Azure services" option enabled. If you don't want to do this then you will either need to configure your script to determine the IP address when it is run and add this to the SQL firewall rule as part of your script, or you would need to look at using a hybrid automation worker that ...
You cannot give Azure SQL Db any specific IP address. However, you can configure service endpoint of Azure SQL Db to allow any resources inside VNET or from a specific IP. It means inbound to Azure SQL Db can be controlled. It would be a hope to have User-Defined Routing to support Azure SQL Db to route traffic to ExpressRoute.
I've started working on a Terraform provider that will do this over at https://github.com/jayway/terraform-provider-mssql. It's still very early work, but I've managed to make it provision logins and users for those logins in a local SQL Server instance (that was already running, so I haven't tested it at all in conjunction with e.g. the AzureRM provider). ...
There is no way built into Azure SQL to autoscale, however, you can configure performance alerts using Azure Monitor that look at CPU or other metrics. When you create an alert you define an action group to trigger when the threshold is breached, this can notify, but it can also call a Logic App, Function or Automation runbook. Using this you can trigger ...
Please do convey which region you are trying to create your resources. There are some limitations that have been implemented at a subscription level to ensure service availability for Covid-19 essential services and Workloads related to this global pandemic. You could try Southeast Asia region, as customers have been successful in deploying non-critical ...
You have built-in backup in Azure Database for MySQL
But if you really want export to Azure Storage then I would recommend Data Factory.
Here is some documentation on connection Data factory and Azure MySQL.
You can reset the admin password in the portal(or via CLI)
1 Using Azure Portal open your Azure SQL Server blade (do not confuse with the database blade)
2 Make sure you are in the Overview blade.
3 Click on "Reset password" at the top of the overview ...
My route table is configured to forward traffic to this IP address through my Virtual Private Gateway.
I don't think there is a possibility of this specific approach working, because...
I have the route table of my gateway subnet configured to forward traffic destined for the Microsoft.Sql regional endpoint public IP address to my proxy VM as if it were ...
You can create an automation account and runbook which runs a task to export the backup of databases to a storage account every so often.
Here is an example:
$ResourceGroupName = "rg"
$ServerName = "sqlserver"
$StorageKeytype = "StorageAccessKey"
$StorageKey = "examplestoragekey"
$sqldbs = ("userdb1,userdb2")
$UserName = "sqladminaccount"
$BacpacUri_Stem = ...
Azure SQL is charged per database, not per server. You will be charged for the size and DTU you select for each DB.
However, you can also use elastic pools, which sounds like it will fit your use case better. Here you create an elastic pool and select the size and performance of the pool, then you create databases inside the pool that share those resources. ...