We are currently revamping our website to improve user experience. During this time, some pages or links may not function as expected. We regret any inconvenience and appreciate your patience and continued support.

Managed vs Unmanaged Database: Which Should You Run

Managed vs unmanaged database, worked out one database at a time for IT heads and database leads in India and the GCC whose databases already run on their own servers or in the cloud. The guide shows who carries patching, backups and failover on AWS and Azure, which facts about each database point which way, and a short decision note to keep for every database.

In a managed vs unmanaged database choice, the cloud provider runs the engine, patches and backups under a managed service. On a self-managed database, your own team runs them. This guide lists who carries each job. Then it gives the facts to gather about each database and a decision note to keep per database.


Last reviewed 2026-11-14 by Manish Sharma.

The reader here is an IT head or database lead with databases already running. For each one, the question is whether it moves to a managed service on AWS or Azure or stays self-run. Also, the managed vs self managed database question gets an answer per database, not one answer for the estate. Also, for more on that burden, see the upkeep a self-run database puts on a team.

Managed vs Unmanaged Database: Who Runs Each Job

A managed database service is one where the cloud provider installs, patches and backs up the engine. People sometimes call it database as a service. However, a self-managed database is one your team installs and runs on its own servers or on cloud virtual machines. The table below splits seven jobs between the two, with a provider documentation page behind each row.

Three cards on managed vs unmanaged database: the provider runs the engine on a managed service, your team runs it on a self-managed database, and a cloud virtual machine sits between
A virtual machine still counts as self-managed.
Job Managed service on AWS or Azure Self-managed Basis
Engine patches Provider applies them, with a maintenance window offered for eligible Azure SQL databases Team plans and applies them Azure SQL Database overview, RDS guide
Engine and operating system upgrades Provider handles them, and how much timing you control differs by service Team plans, tests and runs them Azure SQL Database overview, RDS guide
Automated backups and point-in-time restore Provider runs them, and restore reaches any point within the retention period Team builds, schedules and stores them Azure SQL Database overview, RDS guide
Standby copy and failover An option you choose: Multi-AZ on Amazon RDS, zone redundancy on Azure SQL Team builds and tests it RDS guide, Azure SQL Database overview
Operating system access and server settings Not offered on Amazon RDS, and left to Microsoft on Azure SQL Database Full RDS guide, Azure SQL Database overview
Monitoring and on-call Provider metrics, while query tuning stays with you Team covers all of it RDS guide
Access, encryption and audit logs Shared: you set users and permissions, the service offers encryption and auditing Team carries all of it RDS guide, Azure SQL Database overview

Which Services the Table Covers

The table compares Amazon RDS on AWS with Azure SQL Database and Azure SQL Managed Instance on Azure. However, a standby copy is not a recovery plan, and how a standby copy differs from a recovery plan covers that line.

Managed means shared work

The provider runs the engine jobs, while query tuning and user permissions stay with your team.

Signisys read both pages on 14 November 2026: the AWS Amazon RDS user guide and the Microsoft Learn Azure SQL Database overview.

Facts to Gather About Each Database

First, work through six facts for every database in turn. Each fact comes down to a question your own estate can answer.

Checklist of six facts about each database: engine and version, extensions and agents, skills and rota, patch and recovery needs, data location and exit route
Gather six facts for every database in turn.

Engine, Edition and Version in Use

Ask which engine and edition each database runs. Then ask whether the managed service on each cloud offers that engine and version today. For example, Amazon RDS states that feature support varies by Region and engine version. However, a version outside the list points to an upgrade first or to a self-managed database, and the gap belongs in the note for that database. Also, leave end-of-support dates to a separate check of your own, as they change.

Write down the version

Note the exact engine version of each database before you check a service list.

Extensions, Agents and Server Settings

Next, ask which extensions, linked servers, scheduled jobs, backup agents or file system access the database relies on, and whether the application could change to do without any of them. Then check each against the supported extension and feature list of the service you are considering. Also, anything outside the list points to self-managed, or to a change in the application.

Managed vs Unmanaged Database Skills and the On-Call Rota

Ask who on the team tunes queries, reads recovery logs and answers night calls today. Then ask what happens when that person leaves. A dbaas vs self hosted decision is partly a decision about people. A managed service moves some of this work to the provider, but it leaves the query work with you.

Then write the names. A rota that depends on one person is a fact worth recording under either model.

One person is a risk

A rota that rests on one person belongs in the note for that database.

Patch Windows and Recovery Targets

Then ask when the business allows downtime for patches, and how much data loss and downtime each database can bear. The first is the recovery point, meaning the age of the newest data you can restore. The second is the recovery time, meaning how long the database may stay down.

Then check whether the maintenance window and restore window of each service fit those answers. Azure SQL Database offers a maintenance window for eligible databases. Also, its backups restore to any point within the retention period.

Data Location, Country by Country

List each country the firm works in, such as India and each GCC country. For each, check the current region list of each cloud. Then check whether the managed service you want and its backups run in that region. Amazon RDS states that feature support varies by Region. Also, Microsoft publishes a supported regions list for Azure SQL Managed Instance. Finally, record the answer per database, as one customer table may need a country the others do not.

Exit Routes for a Managed vs Unmanaged Database

Finally, ask how data comes out of each option: native backup, export or replication. Ask also whether the engine is the same one you could run yourself, so a later move stays open. Microsoft states that a managed instance backup restores only to another managed instance. It can also restore to the SQL Server versions it names. This guide claims no lock-in either way. However, the answer belongs in the note for each database.

Cloud Virtual Machines as the Middle Ground

Next, cloud virtual machines sit between the two models. SQL Server on Amazon EC2 or on Azure virtual machines means the provider runs the hardware while your team still runs the engine, so it counts as self-managed. The RDS guide lists the customer as patching the database and operating system on Amazon EC2. Also, Microsoft offers an optional agent extension that schedules patching and backups on an Azure virtual machine. Then Amazon RDS Custom gives administrators access to the operating system and database environment while automating parts of the work. Also, it adds shared responsibility. However, Azure SQL Managed Instance stays a managed service. It offers near full SQL Server feature compatibility, including SQL Server Agent jobs and linked servers.

For a managed vs unmanaged database decision, ask which of the six facts these options answer. Then ask which they leave open. However, picking a cloud is a separate question and not covered here.

Key Takeaway A managed service fits when the engine, the extensions and the data country all match the service list.

Managed vs Unmanaged Database Leanings for Five Sample Databases

Next, five sample databases show how the facts point. Then read each row as a lean to test against your own database, not a ruling.

Sample database What points to a managed service What points to self-managed Basis
An orders database on a supported engine version, no extensions Version on the service list, no server access needed Nothing yet Engine list of each service
A reporting database using an extension the service does not list Other jobs fit the service The missing extension Supported list of the service
A vendor app database where the vendor asks for operating system access Patching and backups fit the service The vendor’s support terms Depends on the vendor’s terms
A finance database with a patch freeze at quarter end Backups and failover fit the service The freeze, if the service window stays fixed Depends on the window the service allows
A customer database whose data must stay in one country The service runs in that country A region gap in that country Region list of each cloud

Signisys working view: for a managed service, start with databases that need no operating-system access and run a supported engine. The basis is the table above. The jobs in its first four rows move to the provider with no change to the application.

Also, keep money out of this first pass. It compares jobs and facts, and your own figures can follow once you set the leans.


Advantages
A managed service moves patching, backups and failover to the provider.


Limitations
Operating system access and some extensions may not be offered.

A Decision Note to Keep for Each Database

Keep one note per database. It records the engine and version, the extensions and agents, and the skills on hand. Also record the patch and recovery needs, the data location and the exit route. Then add the lean chosen and why, who agreed, what would reopen it, and the date.

Signisys working view: run some databases managed and keep others self-managed, instead of forcing one model on every database. The basis is that the facts differ from one database to the next, as the sample table shows.

Key Takeaway One note per database records the lean, the reason, who agreed and what would reopen it.

With each lean set, the move itself once each lean is set covers the move. Also, the checks around the switch to the new database covers the switch.

Help fits when the facts point different ways, or when a vendor’s terms need a ruling. Signisys sells these services as an AWS and Microsoft partner. See help moving databases to managed services on AWS or Azure, cloud migration and modernization work and cloud and platform engineering support. A working session then reads through your decision notes, with no result promised in advance. No charge, with a fixed scope.

Book a consultation
Talk through where each database should run

Managed vs Unmanaged Database FAQ

Can one firm run both models across its databases?

Yes, one database at a time. The decision note records the model for each, so a firm can run some databases managed and keep others self-managed.

In a managed vs unmanaged database, who picks when patches apply?

The provider applies patches, and you set a maintenance window where the service offers one. Azure SQL Database offers a maintenance window for eligible databases, so confirm that yours is one.

Who has the admin login on a managed database service?

You have an admin user for the engine. Amazon RDS does not give access to the underlying host, and Azure SQL Database leaves the operating system to Microsoft. Jobs that need that login point to self-managed or to RDS Custom.

Can a database with custom extensions still run as a managed service?

Only if each extension is on the supported list of the service, or the application changes. On Amazon RDS, support differs by engine version and Region, so read the list of each service before choosing.

Newsletter

Security Insights, Delivered.

Practical, vendor-neutral analysis of threats, tools, and architecture decisions.

Book a Consultation

A practice principal will contact you within 1 business day.

Thank you! A Signisys principal will be in touch within 1 business day.