PostgreSQL servers should have 'log_connections' set to 'ON'
Make sure that for PostgreSQL Database, server parameter 'log_connections' is set to 'ON'. PostgreSQL can generate logs for successful connections to improve visibility for audit and configuration issue resolution.
PostgreSQL can generate logs for successful connections to improve visibility for audit and configuration issue resolution.
What this control checks
PostgreSQL server parameter log_connections must be set to ON.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Log connections should be enabled for PostgreSQL database servers" (eb6f77b9-bd53-4e35-a23d-7f65d5f0e442); PowerPipe control azure_compliance.control.postgres_db_server_log_connections_on.
Scans of the Terraform code that flag the same setting before deployment: KICS query "PostgreSQL Log Connections Not Set" (c640d783-10c5-4071-b6c1-23507300d333); Trivy check AZU-0019.
Framework-specific interpretation
RBI IT Framework for NBFCs: Mapped to 3.1.g (Trails).
CIS Azure Benchmark v1.3.0: Mapped to 4.3.4 (Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v1.4.0: Mapped to 4.3.3 (Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v1.5.0: Mapped to 4.3.3 (Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v2.0.0: Mapped to 4.3.3 (Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v2.1.0: Mapped to 4.3.3 (Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v3.0.0: Mapped to 5.2.6 ([LEGACY]Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL single Server).
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.g Trails
- 4.3.4 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server
- 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server
- 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server
- 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server
- 4.3.3 Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server
- 5.2.6 [LEGACY]Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL single Server
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
postgres_db_server_log_connections_on - Powerpipe Control:
azure_compliance.control.postgres_db_server_log_connections_on - Azure Policy Definition:
eb6f77b9-bd53-4e35-a23d-7f65d5f0e442 - KICS Query:
c640d783-10c5-4071-b6c1-23507300d333 - Trivy Check:
AZU-0019
Last reviewed: 2026-10-14