PostgreSQL connections logging is not enabled

ID

azure_postgresql_log_connections

Severity

low

Remediation Complexity

trivial

Remediation Risk

low

Remediation Effort

low

Vendor

Azure

Resource

Logging

Tags

ASVS50:v16.2.1, ASVS50:v16.3.1, non-reachable

Description

PostgreSQL connections logging is not enabled. It is recommended to activate the connections logging to get information about who has connected.

For that you must configure the option log_connections=On.

Learn more about this topic at Azure PostgreSQL module.

Examples

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: Update PostgreSQL Server setting
      azure_rm_postgresqlconfiguration:
        resource_group: myResourceGroup
        server_name: myServer2
        name: log_connections
        value: Off

Mitigation / Fix

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: Update PostgreSQL Server setting
      azure_rm_postgresqlconfiguration:
        resource_group: myResourceGroup
        server_name: myServer2
        name: log_connections
        value: On