Cis Azure Database 6.2
DevOps & Securitycis-azure-database-6.2Cis Azure Database 6.2 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Ensure Azure Database for PostgreSQL uses only Microsoft Entra Authentication
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/Microsoft_Azure/CIS_Microsoft_Azure_Database_Services_Benchmark_v2.0.0/cis-azure-database-6.2/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-azure-database-6-2, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
6.2 Ensure Azure Database for PostgreSQL uses only Microsoft Entra Authentication (Manual)
Profile Applicability
- Level 1
Description
Ensuring that Microsoft Entra Authentication is the only authentication method prevents the local PostgreSQL authentication from being used.
Rationale
The use of a centralized Identity and Access Management (IAM) solution such as Microsoft Entra ID is highly recommended for all activity related to Identity, Authentication, Authorization, and Accountability.
Decentralized IAM -- such as local authentication methods -- may present additional vulnerability and introduce avoidable administrative complexity.
Impact
None documented.
Audit Procedure
Audit from Azure Portal
- From
Azure Database for PostgreSQLselect a server to audit. - Under the Security section, click
Authentication. - In the main window, under the Authentication header, ensure that "Authentication method:" reflects the selection of
Microsoft Entra authentication only.
Expected Result
The "Authentication method" should be set to Microsoft Entra authentication only.
Remediation
Remediate from Azure Portal
- From
Azure Database for PostgreSQLselect a server to remediate. - Under the Security section, click
Authentication. - In the main window, under the Authentication header where "Authentication method:" provides three options, select
Microsoft Entra authentication only.
Default Value
By default, Azure Database for PostgreSQL uses PostgreSQL authentication only.
References
- https://learn.microsoft.com/en-us/azure/postgresql/security/security-entra-concepts
- https://learn.microsoft.com/en-us/security/benchmark/azure/mcsb-identity-management
Profile
- Level 1