🔌 Azure PostgreSQL Server - object.extracts.yaml

• Contextual name: 🔌 object.extracts.yaml
• ID: /types/CA10Z1__CaAzurePostgreSqlServer__c/object.extracts.yaml
• Located in: 📕 Azure PostgreSQL Server

Used In

Logic	Policy	Flags
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Flexible Server connection_throttle.enable Parameter is not set to ON 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Flexible Server Firewall Rules allow access to Azure services 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Flexible Server log_checkpoints Parameter is not set to ON 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Flexible Server log_retention_days Parameter is less than 4 days 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Flexible Server require_secure_transport Parameter is not set to ON 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Single Server Enforce SSL Connection is not set enabled 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Single Server Infrastructure Double Encryption is not enabled 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Single Server log_connections Parameter is not set to ON 🟢	🟢 x3
🧠 prod.logic.yaml 🟢	📝 Azure PostgreSQL Single Server log_disconnections Parameter is not set to ON 🟢	🟢 x3

Content

Open File

---
extracts:
# Values: Enabled, Disabled. Not Nullable. Can't have no access, retrieved via Microsoft.DBforPostgreSQL/servers/read
  - name: "CA10Z1__sslEnforcement__c"
    value: 
      FIELD:
        path: "CA10Z1__sslEnforcement__c"
        undeterminedIf:
          isEmpty: "Corrupted Data. PostgreSQL Server SSL Enforcement cannot be empty."
# Values: Enabled, Disabled. Not Nullable. Can't have no access, retrieved via Microsoft.DBforPostgreSQL/servers/read
  - name: "CA10Z1__infrastructureEncryption__c"
    value: 
      FIELD:
        path: "CA10Z1__infrastructureEncryption__c"
        undeterminedIf:
          isEmpty: "Corrupted Data. PostgreSQL Server Infrastructure Encryption cannot be empty."
# Not nullable
  - name: "CA10Z1__configurations__c"
    value:
      FIELD:
        path: "CA10Z1__configurations__c"
        returnType: BYTES
        undeterminedIf:
          noAccessDelegate:
            path: "CA10Z1__configurations__c"
            currentStateMessage: "Unable to determine Server Configurations. Possible permission issue with Microsoft.DBforPostgreSQL/servers/configurations/read"
  - name: "caJsonFrom__configurations__c"
    value: 
      JSON_FROM:
        arg: 
          EXTRACT: "CA10Z1__configurations__c"
        undeterminedIf:
          isInvalid: "Configurations JSON is invalid."
  - name: "CA10Z1__firewallRules__c"
    value: 
      FIELD:
        path: "CA10Z1__firewallRules__c"
        returnType: BYTES
        undeterminedIf:
          noAccessDelegate:
            path: "CA10Z1__firewallRules__c"
            currentStateMessage: "Unable to determine Firewall Rules. Possible permission issue with Microsoft.Sql/servers/firewallRules/read"
  - name: "caJsonFrom__firewallRules__c"
    value: 
      JSON_FROM:
        arg: 
          EXTRACT: "CA10Z1__firewallRules__c"
        undeterminedIf:
          isInvalid: "Firewall Rules JSON is invalid."
  - name: "CA10Z1__deploymentMode__c"
    value: 
      FIELD:
        path: "CA10Z1__deploymentMode__c"
        undeterminedIf:
          isEmpty: "Corrupted Data. PostgreSQL Deployment Mode cannot be empty."