PostgreSQL server does not disable public network access

Description

Disabling the public network access property improves security by ensuring your Azure Database for PostgreSQL single servers can only be accessed from a private endpoint. This configuration strictly disables access from any public address space outside of Azure IP range and denies all logins that match IP or virtual network-based firewall rules.

Code Example

resource "azurerm_postgresql_server" "example" {
              ...
+             public_network_access_enabled    = false
              ...
            }

Remediation

Terraform

• Resource: azurerm_postgresql_server
• Arguments: public_network_access_enabled

Rule Details

Field	Value
ID	IAC-0576
Severity	LOW
IaC Type	arm
Frameworks	Terraform,
Checkov ID	CKV_AZURE_68

References

• Checkov Rule

---