Azure-PostgreSQLServer-Enforce-PostgreSQL-SSL-Connection
Severity: High
Description: This control ensures that Enforce SSL connection is set to Enabled for PostgreSQL Database Server. SSL connectivity helps to provide a new layer of security, by connecting database server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between database server and client applications helps protect against "man in the middle" attacks by encrypting the data stream between the server and application.
Remediation Steps:
Perform following to update PostgreSQL parameters:
LoLogin to Azure Portal using https://portal.azure.com.
Go to PostgreSQL server.
For each database, click on Connection security.
In SSL settings
Click on ENABLED for Enforce SSL connection.
Important:
Reference:
Blue Hexagon Proprietary