Control: Ensure server parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
Description
Enable log_retention_days on PostgreSQL Servers.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.postgres_db_server_log_retention_days_3Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.postgres_db_server_log_retention_days_3 --shareSQL
This control uses a named query:
select  s.id as resource,  case    when (config -> 'ConfigurationProperties' ->> 'value')::integer <= 3 then 'alarm'    else 'ok'  end as status,  case    when (config -> 'ConfigurationProperties' ->> 'value')::integer <= 3 then s.name || ' log files are retained for 3 days or lesser.'    else s.name || ' log files are retained for more than 3 days.'  end as reason    , s.resource_group as resource_group  , sub.display_name as subscriptionfrom  azure_postgresql_server s  cross join lateral jsonb_array_elements(server_configurations) as config  left join azure_subscription as sub on sub.subscription_id = s.subscription_idwhere  config ->> 'Name' = 'log_retention_days';