last sync: 2021-Sep-24 16:09:49 UTC

Azure Policy definition

Connection throttling should be enabled for PostgreSQL database servers

Name Connection throttling should be enabled for PostgreSQL database servers
Azure Portal
Id 5345bb39-67dc-4960-a1bf-427e16b9a0bd
Version 1.0.0
details on versioning
Category SQL
Microsoft docs
Description This policy helps audit any PostgreSQL databases in your environment without Connection throttling enabled. This setting enables temporary connection throttling per IP for too many invalid password login failures.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: AuditIfNotExists
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
History none
Used in Initiatives
Initiative DisplayName Initiative Id Initiative Category State
CIS Microsoft Azure Foundations Benchmark v1.1.0 1a5bb27d-173f-493e-9568-eb56638dde4d Regulatory Compliance GA
CIS Microsoft Azure Foundations Benchmark v1.3.0 612b5213-9160-4969-8578-1518bd2a000c Regulatory Compliance GA
JSON
{
  "displayName": "Connection throttling should be enabled for PostgreSQL database servers",
  "policyType": "BuiltIn",
  "mode": "Indexed",
  "description": "This policy helps audit any PostgreSQL databases in your environment without Connection throttling enabled. This setting enables temporary connection throttling per IP for too many invalid password login failures.",
  "metadata": {
    "version": "1.0.0",
    "category": "SQL"
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "AuditIfNotExists",
        "Disabled"
      ],
      "defaultValue": "AuditIfNotExists"
    }
  },
  "policyRule": {
    "if": {
      "field": "type",
      "equals": "Microsoft.DBforPostgreSQL/servers"
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "type": "Microsoft.DBforPostgreSQL/servers/configurations",
        "name": "connection_throttling",
        "existenceCondition": {
          "field": "Microsoft.DBforPostgreSQL/servers/configurations/value",
          "equals": "ON"
        }
      }
    }
  }
}