How do I install the Cis Azure Database 6.3 skill?

Run npx skillmds@latest add cyberstrikeus/cis-azure-database-6-3 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Azure Database 6.3 skill do?

Ensure 'Public Network Access' is 'Disabled' for Azure Database for PostgreSQL It is listed under DevOps & Infra on SkillMD.

Is Cis Azure Database 6.3 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Azure Database 6.3?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Azure Database 6.3 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Azure Database 6.3?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Azure Database 6.3 by cyberstrikeus

Name: Cis Azure Database 6.3
Author: cyberstrikeus

File contents

6.3 Ensure 'Public Network Access' is 'Disabled' for Azure Database for PostgreSQL (Automated)

Profile Applicability

Level 2

Description

Setting public networks to disabled prevents requests from the public internet.

Rationale

Disabling public network access prevents Azure Database for PostgreSQL servers from communicating with the public internet and requires the use of Private endpoints for granular network control and segmentation.

Impact

Disabling 'Public Network Access' forces the requirement of the use of Private Endpoints for network connectivity which will require some additional consideration from a network architecture perspective and will introduce cost based on the inbound/outbound data being processed by the Private Endpoint.

Audit Procedure

Audit from Azure Portal

From Azure Database for PostgreSQL select the database you wish to audit.
In the left column expand > Settings.
Select Networking.
Ensure that Public network access is not selected.

Audit from PowerShell

Run the following command with the identifying details for your subscription:

Get-AzPostgreSqlFlexibleServer -name <servername> -ResourceGroupName <resourcegroupname> | Select-Object -property NetworkPublicNetworkAccess

Ensure that Public network access is Disabled.

Audit from Azure Policy

Policy ID: b52376f7-9612-48a1-81cd-1f0e2bc4b3e5 Name: 'Public network access should be disabled for PostgreSQL flexible servers'

Expected Result

Public network access should be Disabled.

Remediation

Remediate from Azure Portal

From Azure Database for PostgreSQL select the database you wish to audit.
In the left column expand > Settings.
Select Networking.
Uncheck/deselect the Public network access option.
Click Save.

Remediate from PowerShell

Update-AzPostgreSqlFlexibleServer -name <servername> -ResourceGroupName <resourcegroupname> -PublicNetworkAccess "Disabled"

Default Value

By default, Public network access is enabled for Azure Database for PostgreSQL.

References

https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-networking

Profile

Level 2

---name: cis-azure-database-6-3description: Ensure 'Public Network Access' is 'Disabled' for Azure Database for PostgreSQL---# 6.3 Ensure 'Public Network Access' is 'Disabled' for Azure Database for PostgreSQL (Automated)## Profile Applicability- Level 2## DescriptionSetting public networks to disabled prevents requests from the public internet.## RationaleDisabling public network access prevents Azure Database for PostgreSQL servers from communicating with the public internet and requires the use of Private endpoints for granular network control and segmentation.## ImpactDisabling 'Public Network Access' forces the requirement of the use of Private Endpoints for network connectivity which will require some additional consideration from a network architecture perspective and will introduce cost based on the inbound/outbound data being processed by the Private Endpoint.## Audit Procedure### Audit from Azure Portal1. From `Azure Database for PostgreSQL` select the database you wish to audit.2. In the left column expand `> Settings`.3. Select `Networking`.4. Ensure that Public network access is `not selected`.### Audit from PowerShellRun the following command with the identifying details for your subscription:```powershellGet-AzPostgreSqlFlexibleServer -name <servername> -ResourceGroupName <resourcegroupname> | Select-Object -property NetworkPublicNetworkAccess```Ensure that Public network access is `Disabled`.### Audit from Azure PolicyPolicy ID: `b52376f7-9612-48a1-81cd-1f0e2bc4b3e5`Name: 'Public network access should be disabled for PostgreSQL flexible servers'## Expected ResultPublic network access should be `Disabled`.## Remediation### Remediate from Azure Portal1. From `Azure Database for PostgreSQL` select the database you wish to audit.2. In the left column expand `> Settings`.3. Select `Networking`.4. Uncheck/deselect the `Public network access` option.5. Click `Save`.### Remediate from PowerShell```powershellUpdate-AzPostgreSqlFlexibleServer -name <servername> -ResourceGroupName <resourcegroupname> -PublicNetworkAccess "Disabled"```## Default ValueBy default, Public network access is enabled for Azure Database for PostgreSQL.## References1. https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-networking## Profile- Level 2

Frequently asked questions

Cis Azure Database 6.3