Skip to main content

Best Practices and Additional Resources

Post-Upgrade Checklist​

  • Database upgrade completed successfully to PostgreSQL 16
  • PGSSLMODE=require environment variable configured
  • SSL connections verified and working
  • Application starts without SSL errors
  • Database operations working correctly
  • SSL connection verified in logs
  • Performance testing completed
  • Backup verification completed
  • Monitoring and alerting updated
  • Documentation updated with new configuration
  • Team trained on new setup

Security Best Practices​

  1. Always require SSL connections: Set PGSSLMODE=require for all Azure PostgreSQL connections
  2. Use Azure Key Vault: Store database passwords and sensitive configuration in Azure Key Vault
  3. Enable Azure PostgreSQL audit logs: Monitor database access and changes
  4. Network security: Use private endpoints when possible for Azure PostgreSQL
  5. Regular security audits: Monitor connection logs for SSL issues
  6. Backup encryption: Ensure backups are encrypted (enabled by default in Azure)
  7. Use Azure AD authentication: When supported, use Azure AD instead of passwords
  8. Implement proper RBAC: Use Azure RBAC for resource management permissions

Additional Resources​

note

Important Note: The PGSSLMODE=require environment variable is mandatory for connecting to Azure Database for PostgreSQL Flexible Server. This ensures secure SSL/TLS encrypted connections are established and is a requirement for all Azure PostgreSQL databases.