azure_compliance

Azure Compliance

Private endpoint connections enforce secure communication by enabling private connectivity to Azure Database for PostgreSQL. Configure a private endpoint connection to enable access to traffic coming only from known networks and prevent access from all other IP addresses, including within Azure.

postgres_server_private_link_used

nist_sp_800_171_rev_2_3_1_1

3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)

nist_sp_800_171_rev_2_3_1_12

3.1.12 Monitor and control remote access sessions

nist_sp_800_171_rev_2_3_1_13

3.1.13 Employ cryptographic mechanisms to protect the confidentiality of remote access sessions

nist_sp_800_171_rev_2_3_1_14

3.1.14 Route remote access via managed access control points

nist_sp_800_171_rev_2_3_1_3

3.1.3 Control the flow of CUI in accordance with approved authorizations

nist_sp_800_171_rev_2_3_13_1

3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems

nist_sp_800_171_rev_2_3_13_2

3.13.2 Employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational systems

nist_sp_800_171_rev_2_3_13_5

3.13.5 Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks

fedramp_high_ac_17_1

AC-17(1) Automated Monitoring / Control

nist_sp_800_53_rev_5_sc_7_3

Access Points SC-7(3)

fedramp_high_sc_7

Boundary Protection (SC-7)

nist_sp_800_53_rev_5_sc_7

nist_sp_800_53_rev_5_ac_4

Information Flow Enforcement (AC-4)

fedramp_high_ac_4

nist_sp_800_53_rev_5_ac_17_1

Monitoring and Control AC-17(1)

all_controls_postgres

PostgreSQL

nist_sp_800_53_rev_5_ac_17

Remote Access (AC-17)

fedramp_high_ac_17

fedramp_high_sc_7_3

SC-7(3) Access Points

Private endpoint should be enabled for PostgreSQL servers

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: Private endpoint should be enabled for PostgreSQL servers

Description

Usage

SQL

Tags