# Cis Azure Database 6.2

> Cis Azure Database 6.2 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure Azure Database for PostgreSQL uses only Microsoft Entra Authentication

- Skill name: `cis-azure-database-6.2`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/Microsoft_Azure/CIS_Microsoft_Azure_Database_Services_Benchmark_v2.0.0/cis-azure-database-6.2/SKILL.md
- Repository: CyberStrikeus/CyberStrike (1,211 GitHub stars when collected)

## SKILL.md

# 6.2 Ensure Azure Database for PostgreSQL uses only Microsoft Entra Authentication (Manual)

## Profile Applicability

- Level 1

## Description

Ensuring that Microsoft Entra Authentication is the only authentication method prevents the local PostgreSQL authentication from being used.

## Rationale

The use of a centralized Identity and Access Management (IAM) solution such as Microsoft Entra ID is highly recommended for all activity related to Identity, Authentication, Authorization, and Accountability.

Decentralized IAM -- such as local authentication methods -- may present additional vulnerability and introduce avoidable administrative complexity.

## Impact

None documented.

## Audit Procedure

### Audit from Azure Portal

1. From `Azure Database for PostgreSQL` select a server to audit.
2. Under the Security section, click `Authentication`.
3. In the main window, under the Authentication header, ensure that "Authentication method:" reflects the selection of `Microsoft Entra authentication only`.

## Expected Result

The "Authentication method" should be set to `Microsoft Entra authentication only`.

## Remediation

### Remediate from Azure Portal

1. From `Azure Database for PostgreSQL` select a server to remediate.
2. Under the Security section, click `Authentication`.
3. In the main window, under the Authentication header where "Authentication method:" provides three options, select `Microsoft Entra authentication only`.

## Default Value

By default, Azure Database for PostgreSQL uses `PostgreSQL authentication only`.

## References

1. https://learn.microsoft.com/en-us/azure/postgresql/security/security-entra-concepts
2. https://learn.microsoft.com/en-us/security/benchmark/azure/mcsb-identity-management

## Profile

- Level 1

---

Source: https://www.openparable.com/skill/devops-security/cis-azure-database-6-2 (OpenParable). Cite the canonical URL above.