PostgreSQL server enables geo-redundant backups misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_102
Category - Subcategory	Storage - Backups
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Azure PostgreSQL allows you to choose between locally redundant or geo-redundant backup storage in the General Purpose and Memory Optimized tiers. When the backups are stored in geo-redundant backup storage, they are not only stored within the region in which your server is hosted, but are also replicated to a paired data center. This provides better protection and ability to restore your server in a different region in the event of a disaster.

How to Fix

Resource: azurerm_postgresql_server

• Arguments: geo_redundant_backup_enabled - (Optional) Turn Geo-redundant server backups on/off. [source,go]

---

{ "resource "azurerm_postgresql_server" "example" { ...

• geo_redundant_backup_enabled = true }

", }