Audit server configuration

Regularly audit server configurations to ensure that there are no misconfigurations that allow unauthorized database access.
Check for misconfigured firewall rules, open ports, and any other configurations that may expose the database to the public internet.
Follow security best practices and recommendations from your cloud service provider for securing database instances

Applies to

T0180 Compromise services / servers
T0127 Exposed database

References

https://pleasantpasswords.com/info/pleasant-password-server/f-best-practices/secure-and-harden-your-server-environment/checklist-for-securing-and-hardening-your-server-environment