This article outlines the basics of securing the data tier of an application using Azure SQL Database and Azure SQL Managed Instance. The security strategy described follows the layered defense-in-depth approach as shown in the picture below, and moves from the outside in:

You can read more about this here;

