Ensure that "connection_throttling" server parameter is enabled for all PostgreSQL database servers provisioned within your Microsoft Azure cloud account. The "connection_throttling" parameter enables temporary connection throttling per IP address for too many invalid login failures.
This rule resolution is part of the Conformity Security & Compliance tool for Azure.
Enabling "connection_throttling" parameter helps generate logging data with respect to concurrent connections. This logging data can be used to discover PostgreSQL database servers that get degraded by an overload of legitimate users or identify Distributed Denial of Service (DDoS) attacks that work by exhausting the network resources.
Audit
To determine if "connection_throttling" parameter is enabled for your Azure PostgreSQL database servers, perform the following actions:
Remediation / Resolution
To enable the "connection_throttling" server parameter for all your Microsoft Azure PostgreSQL database servers, perform the following actions:
References
- Azure Official Documentation
- Monitor and tune Azure Database for PostgreSQL - Single Server
- Server logs in Azure Database for PostgreSQL - Single Server
- CIS Microsoft Azure Foundations
- Azure Command Line Interface (CLI) Documentation
- az postgres server
- az postgres server list
- az postgres server configuration show
- az postgres server configuration set