New Policy (Azure Database for PostgreSQL flexible servers): PostgreSQL flexible servers should log checkpoints

[tdefise]

Policy

• Name: PostgreSQL flexible servers should log checkpoints
• Description: This policy helps audit any PostgreSQL databases in your environment without log_checkpoints setting enabled
• Supported effect(s): AuditIfNotExists, Disabled
• Parameters: None

Description

This policy helps audit any PostgreSQL databases in your environment without log_checkpoints setting enabled

Details

Enabling log_checkpoints helps the PostgreSQL Database to Log each checkpoint in turn generates query and error logs. However, access to transaction logs is not supported.
Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.

Contribution Rules

• Contain a single Policy in a folder by itself with 3 files: azurepolicy.json, azurepolicy.rules.json, and azurepolicy.parameters.json
• Used Confirm-PolicyDefinitionIsValid.ps1
• Used Out-FormattedPolicyDefinition.ps1
• Effect default value alignes with convention