Kron DAM with Azure SQL Database
4 min
A virtual network needs to be configured between the VM hosting Kron PAM and the Azure SQL Database. Below are the definitions of the Kron PAM VM in Azure. All machines or jump servers expected to act as SQL Proxies must be given access to the PAM Server in Azure, along with all its ports.
Azure Kron PAM VM
Network Interface of Kron PAM VM
The Network Interface is connected to the Virtual Network.
Azure SQL Server definitions are provided below:
Azure SQL Server
The figure shows.
- Public Network access must be selected to Selected networks.
- The Virtual Network that includes the Kron PAM VM’s Network Card must be bound.
Azure SQL Server Networking
The IP of Kron PAM VM should be in the Firewall rule
Connectivity should be set to 'Proxy' and Encryption in transit should be 'TLS 1.2'.
It is assumed that the SQL Server and Kron PAM VM device are in the same resource group.
Kron PAM Definitions: The structure is the same as the SQL Proxy definitions in terms of User, Policy, and Realm. The only difference is that Azure SQL Server's Server Name must be provided in the Device IP field when adding the device.
SQL Server’s Server Name
Kron PAM Device Definition
Kron PAM Database Credential
SQL Proxy Connection