New Policy (Azure Database for PostgreSQL flexible servers): PostgreSQL flexible servers should enforce SSL connections

[tdefise]

Policy

• Name: PostgreSQL flexible servers should enforce SSL connections
• Description: Azure Database for PostgreSQL supports connecting your Azure Database for PostgreSQL server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between your database server and your client applications helps protect against 'man in the middle' attacks by encrypting the data stream between the server and your application. This configuration enforces SSL for accessing your database server
• Supported effect(s): AuditIfNotExists, Disabled
• Parameters: None

Description

Audit if PostgreSQL flexible servers enforce SSL connections

Details

Azure Database for PostgreSQL supports connecting your Azure Database for PostgreSQL server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between your database server and your client applications helps protect against 'man in the middle' attacks by encrypting the data stream between the server and your application. This configuration enforces SSL for accessing your database server

Contribution Rules

• Contain a single Policy in a folder by itself with 3 files: azurepolicy.json, azurepolicy.rules.json, and azurepolicy.parameters.json
• Used Confirm-PolicyDefinitionIsValid.ps1
• Used Out-FormattedPolicyDefinition.ps1
• Effect default value alignes with convention