Azure_compliance/control/check

Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
Description: The PostgreSQL parameter connection_throttling enables throttling of excessive connection attempts and logs repeated failed connections coming...
Wed, 31 Dec, 2025 at 3:11 AM
Ensure that Endpoint Protection for all Virtual Machines is installed
Description: This check ensures that Endpoint Protection (such as antivirus or antimalware software) is installed and properly configured on all Azure Virt...
Tue, 13 Jan, 2026 at 1:31 PM
Ensure that Only Approved Extensions Are Installed on VMs
Description: Ensures that virtual machines run only organization-approved extensions, preventing unauthorized software from being installed through VM exte...
Tue, 13 Jan, 2026 at 1:34 PM
Ensure that 'Unattached disks' are encrypted with 'Customer Managed Key' (CMK)
Description: Unattached disks in Azure (disks not currently connected to any VM) must be encrypted using a Customer Managed Key (CMK). Unattached disks may...
Tue, 13 Jan, 2026 at 1:36 PM
Ensure Server Parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server
Description: The PostgreSQL server parameter logfiles.retention_days (log_retention_days) in Azure Database for PostgreSQL defines how long PostgreSQL serv...
Wed, 31 Dec, 2025 at 3:14 AM
Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled
Description: The Azure Database for PostgreSQL server includes a firewall option called “Allow access to Azure services”. When enabled, this setting allows...
Tue, 13 Jan, 2026 at 1:59 PM
Ensure that 'OS and Data' disks are encrypted with Customer Managed Key (CMK)
Description: OS and Data disks should be encrypted using a Customer Managed Key (CMK) stored in Azure Key Vault. This ensures the organization controls the...
Tue, 13 Jan, 2026 at 1:39 PM
Ensure 'Infrastructure double encryption' for PostgreSQL Database Server is 'Enabled'
Description: Infrastructure double encryption adds an encryption layer on top of the default Azure Storage encryption for PostgreSQL Flexible Servers. With...
Wed, 31 Dec, 2025 at 3:17 AM
Ensure 'Enforce SSL connection' is set to 'Enabled' for Standard MySQL Database Server
Description: Enable SSL connection on MYSQL Servers. Rationale: SSL connectivity helps to provide a new layer of security by connecting database serve...
Mon, 21 Aug, 2023 at 7:08 AM
Ensure 'TLS Version' is set to 'TLSV1.2' for MySQL flexible Database Server
Description: Ensure TLS version on MySQL flexible servers is set to the default value. Rationale: TLS connectivity helps to provide a new layer of sec...
Tue, 22 Aug, 2023 at 5:40 AM