Control: 4.3.6 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
It is recommended to enable connection_throttling on PostgreSQL Servers. Enabling connection_throttling helps the PostgreSQL database to set the verbosity of logged messages which in turn generates query and error logs with respect to concurrent connections, that could lead to a successful denial of service (DoS) attack by exhausting connection resources. A system can also fail or be degraded by an overload of legitimate users. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.
- Login to Azure console and navigate to PostgreSQL Servers.
- For each database, go to
Settingssection from left pane.
- Click on
- Search for
- Click ON and save.
From Command Line
Command to update
az postgres server configuration set --resource-group <resourceGroupName> --server-name <serverName> --name connection_throttling --value on
steampipe check azure_compliance.control.cis_v130_4_3_6
This control uses a named query:postgres_db_server_connection_throttling_on