> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure audit postgressql enable connection throttling remediation

### Triage and Remediation

<Tabs>
  <Tab title="Remediation">
    ### Remediation

    <AccordionGroup>
      <Accordion title="Using Console" defaultOpen="true">
        To enable "CONNECTION\_THROTTLING" parameter for PostgreSQL Servers in Azure using Azure Console, please follow the below steps:

        Step 1: Login to the Azure Portal ([https://portal.azure.com/](https://portal.azure.com/)).

        Step 2: Navigate to the Azure Database for PostgreSQL Server that you want to configure.

        Step 3: Click on the "Settings" option in the left-hand menu.

        Step 4: Under the "Settings" menu, click on the "Configuration" option.

        Step 5: In the "Configuration" menu, click on the "Add parameter" button.

        Step 6: In the "Add parameter" window, enter "CONNECTION\_THROTTLING" in the "Parameter name" field.

        Step 7: In the "Value" field, enter the desired value for the parameter. For example, "1" to enable the parameter.

        Step 8: Click on the "OK" button to save the parameter.

        Step 9: Restart the PostgreSQL server for the changes to take effect.

        After following these steps, "CONNECTION\_THROTTLING" parameter will be enabled for the PostgreSQL server in Azure.

        #
      </Accordion>

      <Accordion title="Using CLI">
        To enable "CONNECTION\_THROTTLING" parameter for PostgreSQL Servers on Azure using Azure CLI, follow these steps:

        1. Open the Azure CLI on your local machine or use the Azure Cloud Shell.
        2. Login to your Azure account using the command: `az login`.
        3. Select the subscription in which your PostgreSQL server is present using the command: `az account set --subscription <subscription_id>`.
        4. Get the resource ID of the PostgreSQL server by running the following command: `az postgres server show --resource-group <resource_group_name> --name <server_name> --query id --output tsv`.
        5. Set the "CONNECTION\_THROTTLING" parameter to "on" using the command: `az postgres server configuration set --resource-group <resource_group_name> --server-name <server_name> --name "connection_throttling" --value "on"`.
        6. Verify that the parameter has been set to "on" by running the command: `az postgres server configuration show --resource-group <resource_group_name> --server-name <server_name> --name "connection_throttling"`.

        Note: Replace `<subscription_id>`, `<resource_group_name>`, and `<server_name>` with your actual values.
      </Accordion>

      <Accordion title="Using Python">
        To remediate the misconfiguration "Enable CONNECTION\_THROTTLING Parameter for PostgreSQL Servers" in Azure using Python, you can follow the below steps:

        1. Import the required modules:

        ```
        from azure.identity import DefaultAzureCredential
        from azure.mgmt.postgresql import PostgreSQLManagementClient
        from azure.mgmt.postgresql.models import Configuration, ConfigurationValue
        ```

        2. Authenticate to Azure using DefaultAzureCredential:

        ```
        credential = DefaultAzureCredential()
        ```

        3. Create a PostgreSQLManagementClient object:

        ```
        subscription_id = '<subscription_id>'
        resource_group_name = '<resource_group_name>'
        server_name = '<server_name>'

        client = PostgreSQLManagementClient(credential, subscription_id)
        ```

        4. Get the current configuration of the PostgreSQL server:

        ```
        current_configuration = client.configurations.list_by_server(resource_group_name, server_name)
        ```

        5. Check if the "CONNECTION\_THROTTLING" parameter is already enabled:

        ```
        is_connection_throttling_enabled = False

        for configuration in current_configuration:
            if configuration.name == "CONNECTION_THROTTLING":
                is_connection_throttling_enabled = True
                break
        ```

        6. If the "CONNECTION\_THROTTLING" parameter is not enabled, set it to "ON" and update the configuration:

        ```
        if not is_connection_throttling_enabled:
            new_configuration = Configuration(name="CONNECTION_THROTTLING",
                                               value=ConfigurationValue(default_value="on",
                                                                        source="system-default"))
            client.configurations.create_or_update(resource_group_name, server_name, "CONNECTION_THROTTLING", new_configuration)
        ```

        7. Verify that the parameter has been enabled by checking the updated configuration:

        ```
        updated_configuration = client.configurations.list_by_server(resource_group_name, server_name)

        for configuration in updated_configuration:
            if configuration.name == "CONNECTION_THROTTLING":
                print("CONNECTION_THROTTLING parameter is now enabled")
        ```

        With these steps, you should be able to remediate the misconfiguration "Enable CONNECTION\_THROTTLING Parameter for PostgreSQL Servers" in Azure using Python.
      </Accordion>

      <Accordion title="Using Terraform">
        ```hcl theme={null}
        resource "azurerm_postgresql_server" "EXISTING_SERVER" {
          name                = "EXISTING_POSTGRESQL_SERVER_NAME"   # replace with your server name
          resource_group_name = "RESOURCE_GROUP_NAME"               # replace with your resource group
          location            = "AZURE_REGION"                      # e.g. "eastus"

          sku_name   = "B_Gen5_2"
          version    = "11"
          storage_mb = 51200

          administrator_login          = "ADMIN_USERNAME"
          administrator_login_password = "ADMIN_PASSWORD"

          auto_grow_enabled                 = true
          backup_retention_days             = 7
          geo_redundant_backup_enabled      = false
          infrastructure_encryption_enabled = false
          public_network_access_enabled     = true
          ssl_enforcement_enabled           = true
          ssl_minimal_tls_version_enforced  = "TLS1_2"
        }

        resource "azurerm_postgresql_configuration" "connection_throttling" {
          name                = "connection_throttling"
          resource_group_name = azurerm_postgresql_server.EXISTING_SERVER.resource_group_name
          server_name         = azurerm_postgresql_server.EXISTING_SERVER.name
          value               = "ON"  # enable temporary connection throttling per IP
        }
        ```

        This change does not force replacement of the PostgreSQL server; it updates the configuration in place.

        Verification: `terraform plan` should show creation of `azurerm_postgresql_configuration.connection_throttling` with `name = "connection_throttling"` and `value` changing from `null`/`"OFF"` to `"ON"`, with no `-/+` replacement for the `azurerm_postgresql_server`.
      </Accordion>
    </AccordionGroup>
  </Tab>
</Tabs>