SQL servers open to the whole internet

What LeftSize checks

Find Azure SQL logical servers with a firewall rule that allows every IPv4 address (0.0.0.0 - 255.255.255.255) while public network access is enabled. Anyone on the internet can then attempt to sign in. The "Allow Azure services" rule (0.0.0.0 - 0.0.0.0) is a different setting and is not flagged by this rule.

Why it matters

Publicly exposed or unprotected resources are one of the most common causes of cloud security incidents.

What you get in the GitHub issue

LeftSize runs this check from a scheduled GitHub Action with a read-only identity in your Azure account and opens one issue per scope, updated on every scan. The issue includes:

• The affected resources, grouped per subscription, resource group or account and region
• Background on why it was flagged and when it is a false positive
• Step-by-step remediation with safety checks
• Ready-to-run fix scripts (CLI, PowerShell or Terraform where available)
• Cost and operational impact of fixing it
• Alternative approaches and their trade-offs
• Snooze, ignore or report a finding with a comment on the issue