Azure-PostgreSQLServer-Log-Connections-Enabled

Severity: Medium

Description: This control ensures that server parameter "log_connections" is set to "ON" for PostgreSQL Database Server. Enabling log_connections helps PostgreSQL Database to log attempted connection to the server, as well as successful completion of client authentication. Log data can be used to identify, troubleshoot, and repair configuration errors and suboptimal performance. By default, log_connections is disabled (set to off).

Remediation Steps:

Perform following to update PostgreSQL parameters:

1. LoLogin to Azure Portal using https://portal.azure.com.

2. Go to PostgreSQL server.

3. For each database, click on Server parameters.

4. Search for log_connections.

5. Click ON and save.

Important:

Reference:

• CIS Microsoft Azure Foundations Benchmark v1.3.0 - 02-01-2021 : Recommendation #4.3.4

• https://docs.microsoft.com/en-us/rest/api/postgresql/configurations/listbyserver