PostgreSQL flexible servers should have 'connection_throttle.enable' set to 'ON'
Prowler check postgresql_flexible_server_connection_throttling_on looks at Azure PostgreSQL flexible servers. It passes where the `connection_throttling` parameter is set to `ON`. The Powerpipe check covers `connection_throttle.enable`.
Without connection_throttling, bursts of new sessions can exhaust connection slots and CPU, degrading availability and causing timeouts. Reduced telemetry delays detection of DoS or runaway clients, extending impact and recovery time.
What this control checks
Azure PostgreSQL flexible server parameter connection_throttle.enable must be set to ON.
Audit evidence
Evidence that deployed resources meet this control: Prowler check postgresql_flexible_server_connection_throttling_on (prowler azure --checks postgresql_flexible_server_connection_throttling_on); PowerPipe control azure_compliance.control.postgres_flexible_server_connection_throttling_on.
Framework-specific interpretation
CIS Azure Benchmark v2.0.0: Mapped to 4.3.5 (Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v2.1.0: Mapped to 4.3.5 (Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v3.0.0: Mapped to 5.2.3 (Ensure server parameter 'connection_throttle.enable' is set to 'ON' for PostgreSQL flexible server).
Framework mappings
The clauses this control is mapped to in each framework.
- 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 5.2.3 Ensure server parameter 'connection_throttle.enable' is set to 'ON' for PostgreSQL flexible Server
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
postgres_flexible_server_connection_throttling_on - Powerpipe Control:
azure_compliance.control.postgres_flexible_server_connection_throttling_on - Prowler Check:
postgresql_flexible_server_connection_throttling_on
Last reviewed: 2026-10-14