Detections
Analytics

Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server

HIGH

Description

Description:

Enable 'SSL connection' on 'PostgreSQL' Servers.

Rationale:

'SSL connectivity' helps to provide a new layer of security by connecting database server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between database server and client applications helps protect against "man in the middle" attacks by encrypting the data stream between the server and application.

Remediation

From Azure Portal

  1. Login to Azure Portal using using https://portal.azure.com
  2. Go to Azure Database for 'PostgreSQL server'
  3. For each database, click on 'Connection security'
  4. In 'SSL' settings, click on 'ENABLED' to enforce SSL connections
  5. Click 'Save'

From Azure CLI

Use the below command to 'enforce ssl connection' for 'PostgreSQL' Database.

az postgres server update --resource-group --name --ssl-enforcement Enabled

From PowerShell

Update-AzPostgreSqlServer -ResourceGroupName -ServerName -SslEnforcement Enabled

Policy Details

Rule Reference ID: AC_AZURE_0408
CSP: Azure
Remediation Available: Yes
Domain: Infrastructure Security
Resource: azurerm_postgresql_server
Resource Category: Database
Resource Type: PostgreSQL

Frameworks