Detections
Analytics

Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server

MEDIUM

Description

Description:

Enable 'log_connections' on 'PostgreSQL Servers'.

Rationale:

Enabling 'log_connections' helps PostgreSQL Database to log attempted connection to the server, as well as successful completion of client authentication. Log data can be used to identify, troubleshoot, and repair configuration errors and suboptimal performance.

Remediation

From Azure Portal

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to 'Azure Database for PostgreSQL servers'.
  3. For each database, click on 'Server parameters'.
  4. Search for 'log_connections'.
  5. Click 'ON' and save.

From Azure CLI

Use the below command to update 'log_connections' configuration.

az postgres server configuration set --resource-group --server-name --name log_connections --value on

From PowerShell

Use the below command to update 'log_connections' configuration.

Update-AzPostgreSqlConfiguration -ResourceGroupName -ServerName -Name log_connections -Value on

Policy Details

Rule Reference ID: AC_AZURE_0396
CSP: Azure
Remediation Available: No
Domain: Logging and Monitoring
Resource: azurerm_postgresql_server
Resource Category: Database
Resource Type: PostgreSQL

Frameworks