Skip to content

EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The EDB Postgres Advanced Server must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the requirements of the data owner.

    Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must implement cryptographic modules adhering to the higher standards ...
    Rule Medium Severity
  • SRG-APP-000506-DB-000353

    Group
  • The EDB Postgres Advanced Server must generate audit records when privileges/permissions are added.

    Changes in the permissions, privileges, and roles granted to users and roles must be tracked. Without an audit trail, unauthorized elevation or restriction of individuals' and groups' privileges co...
    Rule Medium Severity
  • SRG-APP-000495-DB-000327

    Group
  • SRG-APP-000001-DB-000031

    Group
  • SRG-APP-000023-DB-000001

    Group
  • SRG-APP-000033-DB-000084

    Group
  • SRG-APP-000080-DB-000063

    Group
  • SRG-APP-000089-DB-000064

    Group
  • SRG-APP-000090-DB-000065

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules