Secure Azure SQL Server Backups Using Managed Identities

I do believe most people know about the ability to backup your SQL server databases to URL (from Azure VMs).  If you recall you would use the storage key ( ideally not) or a SAS token, from there you would create a SQL credential that is bound to the SAS token (as a secret). Lots of moving parts especially when it comes to rotation time. So now, if you are on the newer versions of SQL server (SQL Server 2022 Cumulative Update 17 ) start thinking about backups via managed identities.

Continue reading

Microsoft Entra Authentication for Azure PostgreSQL

Straight from Microsoft’s documentation “Microsoft Entra authentication is a mechanism of connecting to Azure Database for PostgreSQL flexible server by using identities defined in Microsoft Entra ID. With Microsoft Entra authentication, you can manage database user identities and other Microsoft services in a central location, which simplifies permission management.”

Continue reading

Minimize Downtime with SQL MI Disaster Recovery

I speak to many people who use cloud technologies, especially database tech and how little consideration they give to their MISSION CRITICAL Databases that run in the cloud and its Disaster Recovery process. When I say mission critical, I mean its relative to the company I am talking to, so what might be a tier 1 app for you might not be the case for Bob.

Continue reading

Snowflake + Azure blob

Let’s go back to data platforms today and I want to talk about a very common integration I see nowadays, Azure Blob Storage linked to Snowflake via a storage integration which then we can access semi structured files via external tables, it is a good combination of technology I have to say.

What do you need – the diagram gives you the high level reqs.

Continue reading

Azure SQL MI License free?

A common setup when leveraging the cloud is to use the cloud for Disaster recovery (DR) purposes, some say it becomes a logical extension of your on-prem / data centre (makes more sense if you use express route and private endpoints).

You can use this approach for DR of your SQL based systems, look at the below image and you can see how. (Assume the left-hand side SQL icon is a VM on prem)

Continue reading