compliance.tf
Azure Compliance ControlsAzure Database for PostgreSQL

PostgreSQL servers should have 'connection_throttling' set to 'ON'

Enable connection_throttling on PostgreSQL Servers. The Azure Policy audits PostgreSQL databases without Connection throttling enabled. This setting enables temporary connection throttling per IP for too many invalid password login failures.

What this control checks

PostgreSQL server parameter 'connection_throttling' must be set to 'ON'

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v1.3.0

  • 4.3.6 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v1.4.0

  • 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v1.5.0

  • 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v2.0.0

  • 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v2.1.0

  • 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: postgres_db_server_connection_throttling_on
  • Powerpipe Control: azure_compliance.control.postgres_db_server_connection_throttling_on
  • Azure Policy Definition: 5345bb39-67dc-4960-a1bf-427e16b9a0bd
  • KICS Query: 2b3c671f-1b76-4741-8789-ed1fe0785dc4
  • Trivy Check: AZU-0021

Last reviewed: 2026-10-14

View all Azure controls →

On this page

Ask AI about this

Help improve this page