Azure Compliance ControlsAzure Database for PostgreSQL
PostgreSQL servers should have 'log_retention_days' set to greater than 3 days
Checks that PostgreSQL servers keep logs long enough. KICS checks if the PostgreSQL Database Server retains logs for less than 3 Days. The Powerpipe check ensures server parameter 'log_retention_days' is greater than 3 days.
What this control checks
PostgreSQL server parameter 'log_retention_days' must be greater than 3 days.
Framework mappings
The clauses this control is mapped to in each framework.
- 4.3.7 Ensure server parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
- 4.3.6 Ensure server parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
- 4.3.6 Ensure Server Parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
- 4.3.6 Ensure Server Parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
- 4.3.6 Ensure Server Parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
postgres_db_server_log_retention_days_3 - Powerpipe Control:
azure_compliance.control.postgres_db_server_log_retention_days_3 - KICS Query:
261a83f8-dd72-4e8c-b5e1-ebf06e8fe606
Last reviewed: 2026-10-14