Loading controls...
Benchmark: 4.3 PostgreSQL Database Server
Overview
This section groups security best practices/recommendations for Azure PostgreSQL Database Servers.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-complianceStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select 4.3 PostgreSQL Database Server.
Run this benchmark in your terminal:
powerpipe benchmark run azure_compliance.benchmark.cis_v130_4_3Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_compliance.benchmark.cis_v130_4_3 --shareControls
- 4.3.1 Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server
- 4.3.2 Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server
- 4.3.3 Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server
- 4.3.4 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server
- 4.3.5 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
- 4.3.6 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 4.3.7 Ensure server parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
- 4.3.8 Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled