compliance.tf
Azure Compliance ControlsAzure Database for PostgreSQL

PostgreSQL servers should have 'log_connections' set to 'ON'

Make sure that for PostgreSQL Database, server parameter 'log_connections' is set to 'ON'. PostgreSQL can generate logs for successful connections to improve visibility for audit and configuration issue resolution.

What this control checks

PostgreSQL server parameter log_connections must be set to ON.

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v1.3.0

  • 4.3.4 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v1.4.0

  • 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v1.5.0

  • 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v2.0.0

  • 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v2.1.0

  • 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v3.0.0

  • 5.2.6 [LEGACY]Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL single Server

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: postgres_db_server_log_connections_on
  • Powerpipe Control: azure_compliance.control.postgres_db_server_log_connections_on
  • Azure Policy Definition: eb6f77b9-bd53-4e35-a23d-7f65d5f0e442
  • KICS Query: c640d783-10c5-4071-b6c1-23507300d333
  • Trivy Check: AZU-0019

Last reviewed: 2026-10-14

View all Azure controls →

On this page

Ask AI about this

Help improve this page