Ensure PostgreSQL server enables geo-redundant backups

Error: PostgreSQL server disables geo-redundant backups

Bridgecrew Policy ID: BC_AZR_GENERAL_16
Checkov Check ID: CKV_AZURE_102
Severity: LOW

PostgreSQL server disables geo-redundant backups

Description

Azure PostgreSQL allows you to choose between locally redundant or geo-redundant backup storage in the General Purpose and Memory Optimized tiers. When the backups are stored in geo-redundant backup storage, they are not only stored within the region in which your server is hosted, but are also replicated to a paired data center. This provides better protection and ability to restore your server in a different region in the event of a disaster.

Fix - Buildtime

Terraform

  • Resource: azurerm_postgresql_server
  • Argument: geo_redundant_backup_enabled - (Optional) Turn Geo-redundant server backups on/off.
resource "azurerm_postgresql_server" "example" {
  ...
+ geo_redundant_backup_enabled = true
}