Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server - azurerm_postgresql_configuration

MEDIUM

Description

Description:

Enable 'connection_throttling' on 'PostgreSQL Servers'.

Rationale:

Enabling 'connection_throttling' helps the PostgreSQL Database to 'Set the verbosity of logged messages' which in turn generates query and error logs with respect to concurrent connections, that could lead to a successful Denial of Service (DoS) attack by exhausting connection resources. A system can also fail or be degraded by an overload of legitimate users. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.

Remediation

From Azure Console

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to 'Azure Database' for 'PostgreSQL server'
  3. For each database, click on 'Server parameters'
  4. Search for 'connection_throttling'.
  5. Click 'ON' and save.

Using Azure Command Line Interface 2.0

Use the below command to update 'connection_throttling' configuration.

az postgres server configuration set --resource-group --server-name --name connection_throttling --value on
.

Policy Details

Rule Reference ID: AC_AZURE_0414
CSP: Azure
Remediation Available: Yes
Resource Category: Database
Resource Type: PostgreSQL

Frameworks