Describe the new table Need to query the PostgreSql

<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="84

Add PostgreSql server table about steampipe-plugin-azure HOT 3 CLOSED

turbot commented on September 20, 2024

Add PostgreSql server table

from steampipe-plugin-azure.

Comments (3)

Subhajit97 commented on September 20, 2024

#64
This will unblock following CIS recommendations

Section 4

4.3.1 Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server (Automated)
4.3.3 Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server (Automated)
4.3.4 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server (Automated)
4.3.5 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server (Automated)
4.3.6 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server (Automated)
4.3.7 Ensure server parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server (Automated)
4.3.8 Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled (Manual)

from steampipe-plugin-azure.

Subhajit97 commented on September 20, 2024

#66
This will unblock following CIS recommendations

Section 4

4.3.2 Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server (Automated)

from steampipe-plugin-azure.

Subhajit97 commented on September 20, 2024

#67
This will unblock following CIS recommendations

Section 4
4.4 Ensure that Azure Active Directory Admin is configured (Automated)
4.5 Ensure SQL server's TDE protector is encrypted with Customer-managed key (Automated)

Ensure that Azure Active Directory Admin is configured (Automated)

select
  name,
  id
from
  azure_sql_server
where
  server_azure_ad_administrator is not null;

Ensure SQL server's TDE protector is encrypted with Customer-managed key (Automated)

select
  name,
  encryp ->> 'kind' as encryption_kind,
  encryp -> 'properties' ->> 'serverKeyType' as encryption_key_type,
  encryp -> 'properties' ->> 'uri' as key_uri
from
  azure_sql_server,
  jsonb_array_elements(encryption_protector) as encryp
where
  encryp ->> 'kind' = 'azurekeyvault'
  and encryp -> 'properties' ->> 'serverKeyType' = 'AzureKeyVault'
  and encryp -> 'properties' ->> 'uri' is not null;