Ensure that connection throttling is enabled for your Azure Database for PostgreSQL flexible servers. To enable this feature, set the "connection_throttle.enable" parameter to "ON" in the PostgreSQL server configuration. The "connection_throttle.enable" parameter activates temporary connection throttling per IP address in response to too many invalid login failures."
This rule resolution is part of the Conformity Security & Compliance tool for Azure.
Enabling connection throttling helps generate logging data regarding concurrent connections. This logging data can be used to identify PostgreSQL flexible database servers that are degraded by an overload of legitimate users or to detect Distributed Denial of Service (DDoS) attacks that exhaust network resources.
Audit
To determine if connection throttling is enabled for your Azure PostgreSQL flexible database servers, perform the following operations:
Remediation / Resolution
To enable connection throttling for your Azure PostgreSQL flexible database servers, perform the following operations:
References
- Azure Official Documentation
- What is Azure Database for PostgreSQL - Flexible Server?
- List all server parameters
- Security Control: Logging and threat detection
- Azure Command Line Interface (CLI) Documentation
- az postgres flexible-server list
- az postgres flexible-server parameter show
- az postgres flexible-server parameter set