Ensure PostgreSQL server enables geo-redundant backups
Error: PostgreSQL server disables geo-redundant backups
Bridgecrew Policy ID: BC_AZR_GENERAL_16
Checkov Check ID: CKV_AZURE_102
Severity: LOW
PostgreSQL server disables geo-redundant backups
Description
Azure PostgreSQL allows you to choose between locally redundant or geo-redundant backup storage in the General Purpose and Memory Optimized tiers. When the backups are stored in geo-redundant backup storage, they are not only stored within the region in which your server is hosted, but are also replicated to a paired data center. This provides better protection and ability to restore your server in a different region in the event of a disaster.
Fix - Buildtime
Terraform
- Resource: azurerm_postgresql_server
- Argument: geo_redundant_backup_enabled - (Optional) Turn Geo-redundant server backups on/off.
resource "azurerm_postgresql_server" "example" {
...
+ geo_redundant_backup_enabled = true
}
Updated 10 months ago