Benchmark: 4.3 PostgreSQL Database Server
Overview
This section groups security best practices/recommendations for Azure PostgreSQL Database Servers.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select 4.3 PostgreSQL Database Server.
Run this benchmark in your terminal:
powerpipe benchmark run azure_compliance.benchmark.cis_v210_4_3
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_compliance.benchmark.cis_v210_4_3 --share
Controls
- 4.3.1 Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server
- 4.3.2 Ensure Server Parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server
- 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server
- 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
- 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 4.3.6 Ensure Server Parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
- 4.3.7 Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled
- 4.3.8 Ensure 'Infrastructure double encryption' for PostgreSQL Database Server is 'Enabled'