Ensure that "log_connections" server parameter is enabled for all PostgreSQL database servers available in your Microsoft Azure cloud account. The "log_connections" parameter allows each attempted connection to the database server to be logged, including successful client authentication requests. Only Azure users with administrative privileges can change this parameter at session start, and it cannot be changed during an access session.
This rule resolution is part of the Conformity Security & Compliance tool for Azure.
The logging data generated by "log_connections" parameter can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance for your Microsoft Azure PostgreSQL database servers.
Audit
To determine if "log_connections" parameter is enabled for your Azure PostgreSQL servers, perform the following actions:
Remediation / Resolution
To enable the "log_connections" server parameter for all your Azure PostgreSQL database servers, perform the following actions:
References
- Azure Official Documentation
- Monitor and tune Azure Database for PostgreSQL - Single Server
- Server logs in Azure Database for PostgreSQL - Single Server
- CIS Microsoft Azure Foundations
- Azure Command Line Interface (CLI) Documentation
- az postgres server
- az postgres server list
- az postgres server configuration show
- az postgres server configuration set