Evaluates whether the log_disconnections parameter of each ApsaraDB RDS for PostgreSQL instance is set to on. A value of on is considered Compliant.
Scenarios
Enable this rule to log server disconnection events for security auditing and troubleshooting.
Risk level
Default risk level: low.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
- If the log_disconnections parameter of each ApsaraDB RDS for PostgreSQL database is set to on, the evaluation result is Compliant.
- If the log_disconnections parameter of an ApsaraDB RDS for PostgreSQL database is set to off, the evaluation result is Incompliant.
For more information about how to remediate an incompliant configuration, see Incompliance remediation.
Rule details
| Item | Description |
| Rule name | rds-postgresql-parameter-log-disconnections |
| Rule identifier | rds-postgresql-parameter-log-disconnections |
| Tag | RDS and PostgreSQL |
| Automatic remediation | Not supported |
| Trigger type | Configuration change |
| Supported resource type | ApsaraDB RDS instance |
| Input parameter | None. |
Incompliance remediation
Modify the settings of the ApsaraDB RDS for PostgreSQL instance. For more information, see Modify instance parameters.