PostgreSQL servers should have 'log_duration' set to 'ON'
Checks that PostgreSQL servers have the server parameter 'log_duration' set to 'ON'. The Azure Policy audits PostgreSQL databases without the log_duration setting enabled. KICS checks that 'log_duration' is set to 'ON'.
What this control checks
PostgreSQL server parameter 'log_duration' must be 'ON'; 'off' fails.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Log duration should be enabled for PostgreSQL database servers" (eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3); PowerPipe control azure_compliance.control.postgres_db_server_log_duration_on.
Scans of the Terraform code that flag the same setting before deployment: KICS query "PostgreSQL Log Duration Not Set" (16e0879a-c4ae-4ff8-a67d-a2eed5d67b8f).
Framework-specific interpretation
RBI IT Framework for NBFCs: Mapped to 3.1.g (Trails).
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.g Trails
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
postgres_db_server_log_duration_on - Powerpipe Control:
azure_compliance.control.postgres_db_server_log_duration_on - Azure Policy Definition:
eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3 - KICS Query:
16e0879a-c4ae-4ff8-a67d-a2eed5d67b8f
Last reviewed: 2026-10-14