Azure Database
Azure Database for PostgreSQL¶
Zone Failover / HA¶
Flexible Server supports Zone redundant HA
Regional Failover / HA¶
No, however, you can enable Geo-read-replica (s) in asynchronous mode to achieve Geo-resiliency.
Encryption at Rest¶
FIPS 140-2 validated cryptographic module, AES-256.
Keys are platform managed.
Storage encryption's always on.
Optionally supports CMK.
- https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-security
- https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-data-encryption
Encryption in Transit¶
SSL / TLS by default.
Optionally, SCRAM can be configured.
- https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-connect-scram
- https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-security