More Info:

Ensure that “log_checkpoints” server parameter is enabled for all PostgreSQL database servers available within your Microsoft Azure cloud account. The “log_checkpoints” parameter allows checkpoints and restart points to be logged in the Azure PostgreSQL server log.

Risk Level

Medium

Address

Security

Compliance Standards

CISAZURE, CBP, HITRUST, SOC2, NISTCSF, PCIDSS

Triage and Remediation

Remediation

To remediate the misconfiguration of enabling “LOG_CHECKPOINTS” parameter for PostgreSQL servers in Azure, you can follow the below steps:

  1. Open the Azure portal and navigate to the Azure Database for PostgreSQL service.

  2. Select the PostgreSQL server for which you want to enable the “LOG_CHECKPOINTS” parameter.

  3. Click on the “Configuration” option in the left-hand menu.

  4. Under the “Settings” tab, scroll down to the “Custom” section and click on the ”+ Add” button.

  5. In the “Add Configuration Parameter” window, enter “log_checkpoints” in the “Name” field and “on” in the “Value” field.

  6. Click on the “OK” button to save the configuration parameter.

  7. Restart the PostgreSQL server for the changes to take effect.

After completing these steps, the “LOG_CHECKPOINTS” parameter will be enabled for the PostgreSQL server in Azure.