turbot/azure_compliance
Loading controls...

Control: 4.3.6 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server

Description

It is recommended to enable connection_throttling on PostgreSQL Servers. Enabling connection_throttling helps the PostgreSQL database to set the verbosity of logged messages which in turn generates query and error logs with respect to concurrent connections, that could lead to a successful denial of service (DoS) attack by exhausting connection resources. A system can also fail or be degraded by an overload of legitimate users. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.

Remediation

From Console

  1. Login to Azure console and navigate to PostgreSQL Servers.
  2. For each database, go to Settings section from left pane.
  3. Click on Server parameters.
  4. Search for connection_throttling.
  5. Click ON and save.

From Command Line

Command to update connection_throttling configuration

az postgres server configuration set --resource-group <resourceGroupName> --server-name <serverName> --name connection_throttling --value on

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.cis_v130_4_3_6

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.cis_v130_4_3_6 --share

SQL

This control uses a named query:

postgres_db_server_connection_throttling_on

Tags