compliance.tf
Azure Compliance ControlsAzure Database for PostgreSQL

PostgreSQL servers should have 'log_disconnections' set to 'ON'

Enable log_disconnections on PostgreSQL Servers. The Azure Policy audits PostgreSQL databases without log_disconnections enabled. KICS checks that server parameter 'log_disconnections' is set to 'ON'.

What this control checks

PostgreSQL server parameter 'log_disconnections' must be set to 'ON'.

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v1.3.0

  • 4.3.5 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v1.4.0

  • 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v1.5.0

  • 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v2.0.0

  • 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v2.1.0

  • 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server

CIS Azure Benchmark v3.0.0

  • 5.2.7 [LEGACY]Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL single Server

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: postgres_db_server_log_disconnections_on
  • Powerpipe Control: azure_compliance.control.postgres_db_server_log_disconnections_on
  • Azure Policy Definition: eb6f77b9-bd53-4e35-a23d-7f65d5f0e446
  • KICS Query: 07f7134f-9f37-476e-8664-670c218e4702

Last reviewed: 2026-10-14

View all Azure controls →

On this page

Ask AI about this

Help improve this page