1. Putting Your Head in the Cloud Working with SQL Azure David Postlethwaite 18/06/2016David Postlethwaite

2. Say thank you to our Sponsors :

3. About Me  David Postlethwaite  Liverpool Victoria LV=  SQL and Oracle DBA  MCSE 2012 Data Platform  MCITP 2008, 2005  Oracle OCA  25 years IT Experience  6 years as DBA  david@clunyweb.co.uk  https://www.linkedin.com/in/davidpostlethwaite  Blog: gethynellis.com 3 |18/06/2016 David Postlethwaite 3 |

4. Who has Used Azure SQL DB?  Tried it once  Evaluating  Running Production Systems 4 |18/06/2016 David Postlethwaite

5. Free E-Book  Sign up at  www.gethynellis.com www.gethynellis.com 5 |18/06/2016 David Postlethwaite

6. Introduction  Putting Your Head in the Cloud  Connecting from SSMS  Linked Server from local to Azure  SQL Agent Options  Monitoring and Alerting  Dynamic Data Masking  Always Encrypted  Stretch Database  BACPAC backup Files  Firewall Rules  Azure Server Roles  Backing up and Restoring  Auditing and Security  Scheduling Exports 6 |18/06/2016 David Postlethwaite 6 |

7. Demo Microsoft Azure  http://azure.Microsoft.com 7 |18/06/2016 David Postlethwaite

8. Windows Azure Portal 8 |18/06/2016 David Postlethwaite

9. Windows Azure Classic Portal 9 |18/06/2016 David Postlethwaite

10. Using SSMS  Limited GUI with SSMS 2012 or SSMS 2014 RTM  SSMS 2014 SP1 and 2016 gives better support  Need to write code  Need the azure syntax  Can’t use “USE” 10 |18/06/2016 David Postlethwaite

11. Linked Servers  Need to create ODBC DSN  System Server Native Client 11  Linked Server  Microsoft OLE DB Provider for ODBC Drivers  Azure stored procedure you must enable RPC 11 |18/06/2016 David Postlethwaite

12. SQL Agent 12 |18/06/2016 David Postlethwaite

13. Azure Mobile Services Scheduler 13 |18/06/2016 David Postlethwaite

14. App Service Web Jobs 14 |18/06/2016 David Postlethwaite

15. Azure Automation 15 |18/06/2016 David Postlethwaite

16. Azure Scheduler 16 |18/06/2016 David Postlethwaite

17. SQL Database Monitor 17 |18/06/2016 David Postlethwaite

18. 20/05/2016 David Postlethwaite 18 | Dynamic Data Masking CREATE TABLE [Sales].[CustomerPII]( [CustomerID] [int] NOT NULL, [FirstName] [dbo].[Name] NOT NULL, [LastName] [dbo].[Name] MASKED WITH (FUNCTION='partial(2,"XXXX",2)') NOT NULL, [EmailAddress] [nvarchar](50) MASKED WITH (FUNCTION = 'email()') NULL, [PhoneNumber] [nvarchar](25) MASKED WITH (FUNCTION = 'default()') NULL, [TerritoryID] [int] NULL ) ON [PRIMARY]

19. Dynamic Data Masking 19 |18/06/2016 David Postlethwaite

20.  Encrypt columns using an encryption key  CREATE TABLE [Sales].[CustomerPII](  [CustomerID] [int] NOT NULL, [SSN] [nvarchar](11) COLLATE Latin1_General_BIN2 ENCRYPTED WITH (COLUMN_ENCRYPTION_KEY = [CEK_Auto1], ENCRYPTION_TYPE = Deterministic, ALGORITHM = 'AEAD_AES_256_CBC_HMAC_SHA_256') NULL,  [CreditCardNumber] [nvarchar](25) COLLATE Latin1_General_BIN2 ENCRYPTED WITH (COLUMN_ENCRYPTION_KEY = [CEK_Auto1], ENCRYPTION_TYPE = Deterministic, ALGORITHM = 'AEAD_AES_256_CBC_HMAC_SHA_256') NULL,  ) ON [PRIMARY]  Unencrypted values can only be seen from computer with the certificate installed  Need extra parameter in connection string column encryption setting=enabled  Msg 0, Level 11, State 0, Line 2  Certificate with thumbprint '8C5AE6DCC176752931B33BFE03B7E4EA3A73572C' not found in certificate store 'My' in certificate location 'CurrentUser'. Verify the certificate path in the column master key definition in the database is correct, and the certificate has been imported correctly into the certificate location/store.  Parameter name: masterKeyPath  Currently Only Supported with ADO.NET 4.6 20/05/201620 | Always Encrypted

21.  Take advantage of “cheap” Azure storage  Split a table in two Place “old” data in a database in Azure Leave current data “on premises”  Query knows if data is in current table or archive table and returns merged results seamlessly  SQL will move data to Azure when it becomes “old”  Lots of limitations  Not as cheap as it looks (minimum of €784/month) 20/05/2016 David Postlethwaite 21 | Stretch Tables

22. Create Storage Account 22 |18/06/2016 David Postlethwaite

23. DACPAC and BACPAC  SSMS 2012+  BACPAC Export Data Tier Application – schema + data  DACPAC Extract Data Tier Application - schema  Azure currently only supports BACPAC  Validates the schema before creating the file  Save to local disk  Copy BACPAC to Azure storage for Import from the Management Portal  Or  Export straight to new database on Azure Server 23 |18/06/2016 David Postlethwaite

24. Creating DACPAC and BACPAC 24 |18/06/2016 David Postlethwaite

25. Connecting to SQL Azure – Firewall Rules 25 |18/06/2016 David Postlethwaite

26. SQL Azure Security  IP Security  Commands to manage firewall rules  Sp_set_database_firewall_rule  Select * from sys.database_rules  Select * from sys.firewall_rules;  Login Security  SQL logins only. No AD authentication – in preview  Internal Security  Must explicitly give access to other Azure apps 26 |18/06/2016 David Postlethwaite

27. SQL Azure Security 27 |18/06/2016 David Postlethwaite Internet Yes Client IP address in Server Level Firewall Rules No Server Level Firewall Rules Database Level Firewall Rules Client IP address in Database Level Firewall Rules Login Name and Password Access to any database Access to specific database Yes Login Name and Password Access from Azure Yes No

28. Azure Data Sync (Preview) 28 |18/06/2016 David Postlethwaite

29. Server Roles  Not the Same as local SQL  server-level principal account  Loginmanager  dbmanager 29 |18/06/2016 David Postlethwaite

30. Grammar 30 |18/06/2016 David Postlethwaite – short for premises – proposition or assumption – a building or property Prem Premise Premises

31. Any Questions  Conclusion  Hopefully you now ready to start creating your Azure Databases  Q & A  david@clunyweb.co.uk  Free Ebook: gethynellis.com  Video: http://tinyurl.com/postledm 31 |18/06/2016 David Postlethwaite

32. Your feedback is important! Please let us know what you thought of this session HTTP://SQLSATURDAY.COM/516/SESSIONS/SESSIONEVALUATION.ASPX