diff --git a/en/azure/postgresqlserver/enforce-postgresql-ssl-connection.md b/en/azure/postgresqlserver/enforce-postgresql-ssl-connection.md index a7fd28eac..9ab9583ba 100644 --- a/en/azure/postgresqlserver/enforce-postgresql-ssl-connection.md +++ b/en/azure/postgresqlserver/enforce-postgresql-ssl-connection.md @@ -15,8 +15,13 @@ | **Recommended Action** | Ensure the connection security settings of each PostgreSQL server are configured to enforce SSL connections. | ## Detailed Remediation Steps - - - +1. Log in to the Microsoft Azure Management Console. +2. Select the "Search resources, services, and docs" option at the top and search for PostgreSQL.
+3. On the "Azure Database for PostgreSQL servers" page, select the database by clicking on the "Name" as a link that needs to be examined.
+4. Scroll down the left navigation panel and choose "Connection Security" under "Settings."
+5. On the "Connection Security" page, search for "SSL settings". If the Enforce SSL connection is set to "DISABLED" this is a security risk as data is transmitted unencrypted. This is against azure best practices.
+6. To enable the "SSL Connection" select "ENABLED" from the toggle configuration button. In the "TLS setting" select the highest version "1.2" as of now.
+7. Click on the "Save" button at the top to make the changes.
+8. Repeat step number 3 - 7 to ensure the server parameters for each PostgreSQL server have the ssl connection enabled.
diff --git a/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step2.png b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step2.png new file mode 100644 index 000000000..8256bb7b6 Binary files /dev/null and b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step2.png differ diff --git a/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step3.png b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step3.png new file mode 100644 index 000000000..44b063dc6 Binary files /dev/null and b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step3.png differ diff --git a/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step4.png b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step4.png new file mode 100644 index 000000000..f617fbce3 Binary files /dev/null and b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step4.png differ diff --git a/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step5.png b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step5.png new file mode 100644 index 000000000..fdfd77899 Binary files /dev/null and b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step5.png differ diff --git a/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step6.png b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step6.png new file mode 100644 index 000000000..259a9cde3 Binary files /dev/null and b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step6.png differ diff --git a/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step7.png b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step7.png new file mode 100644 index 000000000..90d79fa7b Binary files /dev/null and b/resources/azure/postgresqlserver/enforce-postgresql-ssl-connection/step7.png differ