Access to Azure services for PostgreSQL Database Server should be disabled

azure.dbforpostgresql

Description

Disable access from Azure services to PostgreSQL Database Server. If access from Azure services is enabled, the server’s firewall will accept connections from all Azure resources, including resources not in your subscription. This is usually not a desired configuration. Instead, set up firewall rules to allow access from specific network ranges or VNET rules to allow access from specific virtual networks.

Remediation

To disable this firewall rule on your Azure PostgreSQL Server, follow these steps:

  1. Log in to Azure Portal.
  2. Go to Azure Database for PostgreSQL server.
  3. For each database, click on Connection security.
  4. In Firewall rules, ensure Allow access to Azure services is set to OFF.
  5. Click Save to apply the changed rule.