Detections
Analytics

Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server

LOW

Description

Description:

Enable 'connection_throttling' on 'PostgreSQL Servers'.

Rationale:

Enabling 'connection_throttling' helps the PostgreSQL Database to 'Set the verbosity of logged messages'. This in turn generates query and error logs with respect to concurrent connections that could lead to a successful Denial of Service (DoS) attack by exhausting connection resources. A system can also fail or be degraded by an overload of legitimate users. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.

Remediation

From Azure Portal

  1. Login to Azure Portal using https://portal.azure.com.
  2. Go to 'Azure Database for PostgreSQL servers'.
  3. For each database, click on 'Server parameters'.
  4. Search for 'connection_throttling'.
  5. Click 'ON' and save.

From Azure CLI

Use the below command to update 'connection_throttling' configuration.

az postgres server configuration set --resource-group --server-name --name connection_throttling --value on

From PowerShell

Use the below command to update 'connection_throttling' configuration.

Update-AzPostgreSqlConfiguration -ResourceGroupName -ServerName -Name connection_throttling -Value on

Policy Details

Rule Reference ID: AC_AZURE_0397
CSP: Azure
Remediation Available: No
Domain: Infrastructure Security
Resource: azurerm_postgresql_server
Resource Category: Database
Resource Type: PostgreSQL

Frameworks