lacework-global-545
Set server parameter 'log_connections' to 'ON' for PostgreSQL Database Server (Automated)
Profile Applicability
• Level 1
Description
Enable log_connections on PostgreSQL Servers.
Rationale
Enabling log_connections
helps PostgreSQL Database to log attempted connection to the server, as well as successful completion of client authentication. Log data can be used to identify, troubleshoot, and repair configuration errors and suboptimal performance.
Audit
From Azure Portal
- Login to Azure Portal using https://portal.azure.com
- Go to
Azure Database
forPostgreSQL server
- For each database, click on
Server parameters
- Search for
log_connections
. - Ensure that value is set to
ON
.
From Azure CLI
Ensure log_connections
value is set to ON
az postgres server configuration show --resource-group <resourceGroupName> --server-name <serverName> --name log_connections
Remediation
From Azure Portal
- Login to Azure Portal using https://portal.azure.com.
- Go to
Azure Database for PostgreSQL servers
. - For each database, click
Server parameters
. - Search for
log_connections
. - Click
ON
and save.
From Azure CLI
Use the below command to update log_connections configuration.
az postgres server configuration set --resource-group <resourceGroupName> --server-name <serverName> --name log_connections --value on
References
https://docs.microsoft.com/en-us/rest/api/postgresql/configurations/listbyserver
https://docs.microsoft.com/en-us/azure/postgresql/howto-configure-server-parameters-using-portal
https://docs.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-3-enable-logging-for-security-investigation