Azure Compliance ControlsAzure Database for PostgreSQL
PostgreSQL servers should have geo-redundant backup enabled
Azure Database for PostgreSQL allows you to choose the redundancy option for your database server. It can be set to a geo-redundant backup storage, replicated to a paired region. Configuring geo-redundant storage for backup is only allowed during server create.
What this control checks
PostgreSQL server geoRedundantBackup must be Enabled; any other value fails.
Framework mappings
The clauses this control is mapped to in each framework.
- CP-6 Alternate Storage Site
- CP-6(1) Separation From Primary Site
- CP-9 System Backup
FedRAMP Moderate Baseline Rev 4
- CP-6 Alternate Storage Sites
- CP-6(1) Separation From Primary Site
- CP-9: Information System Backup
- 3.8.9: Protect the confidentiality of backup CUI at storage locations.
- 5.2 Policy for Information System Audit (IS Audit)
- 6 Business Continuity Planning (BCP) and Disaster Recovery
- 6.2 Recovery strategy / Contingency Plan
- 6.3 Backup and Recovery
- MP.L2-3.8.9 Protect the confidentiality of backup CUI at storage locations
- CP-6 Alternate Storage Sites
- CP-6(1) Separation From Primary Site
- CP-9 System Backup
- 1618.09l1Organizational.45-09.l 09.05 Information Back-Up
- 1623.09l2Organizational.4-09.l 09.05 Information Back-Up
- 1626.09l3Organizational.5-09.l 09.05 Information Back-Up
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
postgres_db_server_geo_redundant_backup_enabled - Checkov Check:
CKV_AZURE_102 - Powerpipe Control:
azure_compliance.control.postgres_db_server_geo_redundant_backup_enabled - Azure Policy Definition:
48af4db5-9b8b-401c-8e74-076be876a430 - KICS Query:
8b042c30-e441-453f-b162-7696982ebc58
Last reviewed: 2026-10-14