Summary

Security is one of the deciding factors for an organization when opting to put their data in the cloud.

To connect to a SQL database and a managed instance, the machine's IP address or the client IP address should exist in the firewall settings or NSG rules. If not, the connection request will be denied.

Access to SQL Database can be restricted to one or more virtual networks using service endpoints. Private endpoints for SQL Database further strengthen security by assigning a private IP address to a SQL database from the customer's virtual network.

SQL Managed Instance can be deployed in a virtual network and offers strong security isolation, but SQL Database and SQL Managed Instance support similar secure connection options. SQL Managed Instance also gives an option to opt for a public endpoint connection, which can be secured by using NSG and firewall rules.

SQL Database and SQL Managed Instance allow SQL and Azure AD authentication. An organization...