Description

Detects Azure PostgreSQL Flexible Servers that have connection throttling disabled. Connection throttling is a critical security feature that helps prevent denial of service attacks by limiting the number of concurrent connections, and disabling it could leave the database vulnerable to connection flooding attacks.

Detection Strategy

• Checks the 'connection_throttle.enable' configuration parameter for each PostgreSQL Flexible Server

• Reports a vulnerability if the connection throttling parameter is set to 'off'

• Examines all PostgreSQL Flexible Servers in the specified Azure subscription