MEDIUM
Source
CloudSploit
ID
sql-server-database-logging-enabled

SQL Server Database Logging Enabled

Ensures Activity Log alerts for the create or update and delete SQL Server Database events are enabled

Monitoring for create or update and delete SQL Server Database events gives insight into network access changes and may reduce the time it takes to detect suspicious activity.

Add a new log alert to the Alerts service that monitors for SQL Server Database create or update and delete events.