Control: 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
Description
It is recommended to enable connection_throttling on PostgreSQL Servers. Enabling connection_throttling helps the PostgreSQL database to set the verbosity of logged messages which in turn generates query and error logs with respect to concurrent connections, that could lead to a successful denial of service (DoS) attack by exhausting connection resources. A system can also fail or be degraded by an overload of legitimate users. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.
Remediation
From Console
- Login to Azure console and navigate to PostgreSQL Servers.
- For each database, go to
Settingssection from left pane. - Click on
Server parameters. - Search for
connection_throttling. - Click ON and save.
From Command Line
Command to update connection_throttling configuration
az postgres server configuration set --resource-group <resourceGroupName> --server-name <serverName> --name connection_throttling --value on
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v140_4_3_5Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v140_4_3_5 --shareSQL
This control uses a named query:
postgres_db_server_connection_throttling_on