Merge pull request #269744 from ElazarK/WI227197-support-mysql

WI1227197 support mysql

Author: PMEds28

articles/defender-for-cloud/defender-for-databases-introduction.md

@@ -1,13 +1,14 @@
 ---
-title: Microsoft Defender for open-source relational databases
+title: What is Defender for open-source databases
 description: Learn about the benefits and features of Microsoft Defender for open-source relational databases such as PostgreSQL, MySQL, and MariaDB
-ms.date: 06/19/2022
+ms.date: 04/02/2024
 ms.topic: overview
 ms.author: dacurwin
 author: dcurwin
+#customer intent: As a reader, I want to understand the purpose and features of Microsoft Defender for open-source relational databases so that I can make informed decisions about its usage.
 ---
 
-# Overview of Microsoft Defender for open-source relational databases
+# What is Microsoft Defender for open-source relational databases
 
 This plan brings threat protections for the following open-source relational databases:
 
@@ -19,15 +20,22 @@ Defender for Cloud detects anomalous activities indicating unusual and potential
 
 ## Availability
 
-| Aspect | Details |
-|--|:-|
-| Release state: | General availability (GA) |
-| Pricing: | **Microsoft Defender for open-source relational databases** is billed as shown on the [pricing page](https://azure.microsoft.com/pricing/details/defender-for-cloud/) |
-| Supported environments:|:::image type="icon" source="./media/icons/yes-icon.png"::: PaaS<br>:::image type="icon" source="./media/icons/no-icon.png"::: Azure Arc-enabled machines |
-| Protected versions of PostgreSQL: | Single Server - General Purpose and Memory Optimized. Learn more in [PostgreSQL Single Server pricing tiers](../postgresql/concepts-pricing-tiers.md).  Flexible Server - all pricing tiers (enablement is currently only supported at resource level).|
-| Protected versions of MySQL: | Single Server - General Purpose and Memory Optimized. Learn more in [MySQL pricing tiers](../mysql/concepts-pricing-tiers.md). |
-| Protected versions of MariaDB: | General Purpose and Memory Optimized. Learn more in [MariaDB pricing tiers](../mariadb/concepts-pricing-tiers.md). |
-| Clouds: | :::image type="icon" source="./media/icons/yes-icon.png"::: Commercial clouds<br> :::image type="icon" source="./media/icons/yes-icon.png"::: Azure Government<br>:::image type="icon" source="./media/icons/no-icon.png"::: Microsoft Azure operated by 21Vianet |
+Check out the [pricing page](https://azure.microsoft.com/pricing/details/defender-for-cloud/) for pricing information for Microsoft Defender for open-source relational databases.
+
+Defender for open-source relational database is supported on PaaS environments and not on Azure Arc-enabled machines.
+
+**Protected versions of PostgreSQL include**:
+- Single Server - General Purpose and Memory Optimized. Learn more in [PostgreSQL Single Server pricing tiers](../postgresql/concepts-pricing-tiers.md). 
+- Flexible Server - all pricing tiers.
+
+**Protected versions of MySQL include**:
+- Single Server - General Purpose and Memory Optimized. Learn more in [MySQL pricing tiers](../mysql/concepts-pricing-tiers.md).
+- Flexible Server - all pricing tiers.
+
+**Protected versions of MariaDB include**:
+- General Purpose and Memory Optimized. Learn more in [MariaDB pricing tiers](../mariadb/concepts-pricing-tiers.md).
+
+View [cloud availability](support-matrix-cloud-environment.md#cloud-support) for Defender for open-source relational databases
 
 ## What are the benefits of Microsoft Defender for open-source relational databases?
 
@@ -48,16 +56,14 @@ These alerts appear in Defender for Cloud's security alerts page and include:
 
 Threat intelligence enriched security alerts are triggered when there are:
 
-- **Anomalous database access and query patterns** - For example, an abnormally high number of failed sign-in attempts with different credentials (a brute force attempt)
-- **Suspicious database activities** - For example, a legitimate user accessing an SQL Server from a breached computer which communicated with a crypto-mining C&C server
-- **Brute-force attacks** – With the ability to separate simple brute force from brute force on a valid user or a successful brute force
+- **Anomalous database access and query patterns** - For example, an abnormally high number of failed sign-in attempts with different credentials (a brute force attempt).
+- **Suspicious database activities** - For example, a legitimate user accessing an SQL Server from a breached computer which communicated with a crypto-mining C&C server.
+- **Brute-force attacks** – With the ability to separate simple brute force or a successful brute force.
 
 > [!TIP]
 > View the full list of security alerts for database servers [in the alerts reference page](alerts-reference.md#alerts-for-open-source-relational-databases).
 
-## Next steps
-
-In this article, you learned about Microsoft Defender for open-source relational databases.
+## Related articles
 
-> [!div class="nextstepaction"]
-> [Enable enhanced protections](enable-enhanced-security.md)
+- [Enable Microsoft Defender for open-source relational databases and respond to alerts](defender-for-databases-usage.md)
+- [Common questions about Defender for Databases](faq-defender-for-databases.yml)

articles/defender-for-cloud/defender-for-databases-usage.md

@@ -1,11 +1,13 @@
 ---
-title: Setting up and responding to alerts from Microsoft Defender for open-source relational databases
-description: Learn how to configure Microsoft Defender for open-source relational databases to detect anomalous database activities indicating potential security threats to the database.
-ms.date: 11/09/2021
+title: Microsoft Defender for open-source relational databases
+description: Configure Microsoft Defender for open-source relational databases to detect potential security threats.
+ms.date: 04/02/2024
 ms.topic: how-to
 ms.author: dacurwin
 author: dcurwin
+#customer intent: As a reader, I want to learn how to configure Microsoft Defender for open-source relational databases to enhance the security of my databases.
 ---
+
 # Enable Microsoft Defender for open-source relational databases and respond to alerts
 
 Microsoft Defender for Cloud detects anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases for the following services:
@@ -59,13 +61,12 @@ Defender for Cloud sends email notifications when it detects anomalous database
 
 1. For additional details and recommended actions for investigating the current threat and remediating future threats, select a specific alert.
 
-    :::image type="content" source="media/defender-for-databases-usage/specific-alert-details.png" alt-text="Details of a specific alert." lightbox="media/defender-for-databases-usage/specific-alert-details.png":::
+    :::image type="content" source="media/defender-for-databases-usage/specific-alert-details.png" alt-text="Screenshot that shows the details of a specific alert." lightbox="media/defender-for-databases-usage/specific-alert-details.png":::
 
 > [!TIP]
 > For a detailed tutorial on how to handle your alerts, see [Manage and respond to alerts](tutorial-security-incident.md).
 
-## Next steps
+## Next step
 
-- [Automate responses to Defender for Cloud triggers](workflow-automation.md)
-- [Stream alerts to a SIEM, SOAR, or ITSM solution](export-to-siem.md)
-- [Suppress alerts from Defender for Cloud](alerts-suppression-rules.md)
+> [!div class="nextstepaction"]
+> [Automate responses to Defender for Cloud triggers](workflow-automation.md)

articles/defender-for-cloud/media/defender-for-databases-usage/db-alerts-page.png

@@ -22,12 +22,36 @@ If you're looking for items older than six months, you can find them in the [Arc
 
 ## April 2024
 
-| Date    | Update                                                           |
-| ------- | ---------------------------------------------------------------- |
+|Date | Update |
+|--|--|
+| April 3 | [Defender for open-source relational databases updates](#defender-for-open-source-relational-databases-updates) |
 | April 2 | [Update to recommendations to align with Azure AI Services resources](#update-to-recommendations-to-align-with-azure-ai-services-resources) |
 | April 2 | [Deprecation of Cognitive Services recommendation](#deprecation-of-cognitive-services-recommendation) |
 | April 2 | [Containers multicloud recommendations (GA)](#containers-multicloud-recommendations-ga) |
 
+### Defender for open-source relational databases updates
+
+April 3, 2024
+
+**Defender for PostgreSQL Flexible Servers post-GA updates** - The update enables customers to enforce protection for existing PostgreSQL flexible servers at the subscription level, allowing complete flexibility to enable protection on a per-resource basis or for automatic protection of all resources at the subscription level.
+
+**Defender for MySQL Flexible Servers Availability and GA** - Defender for Cloud expanded its support for Azure open-source relational databases by incorporating MySQL Flexible Servers.
+
+This release includes:
+
+- Alert compatibility with existing alerts for Defender for MySQL Single Servers.
+- Enablement of individual resources.
+- Enablement at the subscription level.
+
+If you're already protecting your subscription with Defender for open-source relational databases, your flexible server resources are automatically enabled, protected, and billed.
+
+Specific billing notifications have been sent via email for affected subscriptions.
+
+Learn more about [Microsoft Defender for open-source relational databases](defender-for-databases-introduction.md).
+
+> [!NOTE]
+> Updates for Azure Database for MySQL flexible servers are rolling out over the next few weeks. If you see the error message `The server <servername> is not compatible with Advanced Threat Protection`, you can either wait for the update to roll out, or open a support ticket to update the server sooner to a supported version.
+
 ### Update to recommendations to align with Azure AI Services resources
 
 April 2, 2024

articles/defender-for-cloud/media/defender-for-databases-usage/specific-alert-details.png

@@ -2,7 +2,7 @@
 title: Important upcoming changes
 description: Upcoming changes to Microsoft Defender for Cloud that you might need to be aware of and for which you might need to plan. 
 ms.topic: overview
-ms.date: 04/01/2024
+ms.date: 04/03/2024
 ---
 
 # Important upcoming changes to Microsoft Defender for Cloud
@@ -27,7 +27,6 @@ If you're looking for the latest release notes, you can find them in the [What's
 |--|--|--|
 | [Deprecating of virtual machine recommendation](#deprecating-of-virtual-machine-recommendation) | April 2, 2024 | April 30, 2024 |
 | [General Availability of Unified Disk Encryption recommendations](#general-availability-of-unified-disk-encryption-recommendations) | March 28, 2024 | April 30, 2024 |
-| [Defender for open-source relational databases updates](#defender-for-open-source-relational-databases-updates) | March 6, 2024 | April, 2024 |
 | [Changes in where you access Compliance offerings and Microsoft Actions](#changes-in-where-you-access-compliance-offerings-and-microsoft-actions) | March 3, 2024 | September 30, 2025 |
 | [Microsoft Security Code Analysis (MSCA) is no longer operational](#microsoft-security-code-analysis-msca-is-no-longer-operational) | February 26, 2024 | February 26, 2024 |
 | [Decommissioning of Microsoft.SecurityDevOps resource provider](#decommissioning-of-microsoftsecuritydevops-resource-provider) | February 5, 2024 | March 6, 2024 |
@@ -45,6 +44,7 @@ If you're looking for the latest release notes, you can find them in the [What's
 | [Deprecating two security incidents](#deprecating-two-security-incidents) |  | November 2023 |
 | [Defender for Cloud plan and strategy for the Log Analytics agent deprecation](#defender-for-cloud-plan-and-strategy-for-the-log-analytics-agent-deprecation) |  | August 2024 |
 
+
 ## Deprecating of virtual machine recommendation
 
 **Announcement date: April 2, 2024**
@@ -74,26 +74,6 @@ The recommendations depend on [Guest Configuration](/azure/governance/machine-co
 
 These recommendations will replace the recommendation "Virtual machines should encrypt temp disks, caches, and data flows between Compute and Storage resources." 
 
-## Defender for open-source relational databases updates
-
-**Announcement date: March 6, 2024**
-
-**Estimated date for change: April, 2024**
-
-**Defender for PostgreSQL Flexible Servers post-GA updates** - The update enables customers to enforce protection for existing PostgreSQL flexible servers at the subscription level, allowing complete flexibility to enable protection on a per-resource basis or for automatic protection of all resources at the subscription level.
-
-**Defender for MySQL Flexible Servers Availability and GA** - Defender for Cloud is set to expand its support for Azure open-source relational databases by incorporating MySQL Flexible Servers.
-This release will include:
-
-- Alert compatibility with existing alerts for Defender for MySQL Single Servers.
-- Enablement of individual resources.
-- Enablement at the subscription level.
-
-If you're already protecting your subscription with Defender for open-source relational databases, your flexible server resources are automatically enabled, protected, and billed.
-Specific billing notifications have been sent via email for affected subscriptions.
-
-Learn more about [Microsoft Defender for open-source relational databases](defender-for-databases-introduction.md).
-
 ## Changes in where you access Compliance offerings and Microsoft Actions
 
 **Announcement date: March 3, 2024**