Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
Azure
  • Azure/Owner
  • Azure/Admin
  • Azure/Operator
  • Azure/Metadata
  • Azure/AI Foundry/admin
  • Azure/AI Foundry/metadata
  • Azure/AKS/admin
  • Azure/AKS/metadata
  • Azure/Alerts Management/admin
  • Azure/Alerts Management/operator
  • Azure/Alerts Management/metadata
  • Azure/API Management/admin
  • Azure/API Management/operator
  • Azure/API Management/metadata
  • Azure/Application Gateway/admin
  • Azure/Application Gateway/operator
  • Azure/Application Gateway/readonly
  • Azure/Application Gateway/metadata
  • Azure/Application Insights/admin
  • Azure/Application Insights/metadata
  • Azure/App Service/admin
  • Azure/App Service/metadata
  • Azure/Automation/admin
  • Azure/Automation/operator
  • Azure/Automation/metadata
  • Azure/Bot Service/Admin
  • Azure/Bot Service/Operator
  • Azure/Bot Service/Metadata
  • Azure/Cognitive Services/admin
  • Azure/Cognitive Services/operator
  • Azure/Cognitive Services/metadata
  • Azure/Compute/admin
  • Azure/Compute/operator
  • Azure/Compute/metadata
  • Azure/Container Registry/admin
  • Azure/Container Registry/metadata
  • Azure/Cosmos DB/admin
  • Azure/Cosmos DB/operator
  • Azure/Cosmos DB/metadata
  • Azure/Databricks/admin
  • Azure/Databricks/metadata
  • Azure/Data Factory/admin
  • Azure/Data Factory/metadata
  • Azure/DNS/admin
  • Azure/DNS/metadata
  • Azure/Firewall/admin
  • Azure/Firewall/metadata
  • Azure/Front Door/admin
  • Azure/Front Door/operator
  • Azure/Front Door/metadata
  • Azure/IAM/Owner
  • Azure/IAM/Metadata
  • Azure/Key Vault/admin
  • Azure/Key Vault/operator
  • Azure/Key Vault/metadata
  • Azure/Load Balancer/admin
  • Azure/Load Balancer/metadata
  • Azure/Log Analytics/admin
  • Azure/Log Analytics/metadata
  • Azure/Managed Identity/admin
  • Azure/Managed Identity/metadata
  • Azure/Monitor/Admin
  • Azure/Monitor/Operator
  • Azure/Monitor/Metadata
  • Azure/MySQL/admin
  • Azure/MySQL/metadata
  • Azure/Network/Admin
  • Azure/Network/Operator
  • Azure/Network/ReadOnly
  • Azure/Network/Metadata
  • Azure/Network Watcher/admin
  • Azure/Network Watcher/operator
  • Azure/Network Watcher/readonly
  • Azure/Network Watcher/metadata
  • Azure/PostgreSQL/admin
  • Azure/PostgreSQL/operator
  • Azure/PostgreSQL/metadata
  • Azure/Recovery Service/admin
  • Azure/Recovery Service/operator
  • Azure/Recovery Service/metadata
  • Azure/Redis/Admin
  • Azure/Redis/Operator
  • Azure/Redis/Metadata
  • Azure/Relay/Admin
  • Azure/Relay/ReadOnly
  • Azure/Relay/Metadata
  • Azure/Search Management/admin
  • Azure/Search Management/metadata
  • Azure/Security Center/admin
  • Azure/Security Center/operator
  • Azure/Security Center/metadata
  • Azure/Service Bus/admin
  • Azure/Service Bus/operator
  • Azure/Service Bus/metadata
  • Azure/SignalR Service/Admin
  • Azure/SignalR Service/Operator
  • Azure/SignalR Service/Metadata
  • Azure/SQL/admin
  • Azure/SQL/operator
  • Azure/SQL/readonly
  • Azure/SQL/metadata
  • Azure/SQL Virtual Machine Service/admin
  • Azure/SQL Virtual Machine Service/operator
  • Azure/SQL Virtual Machine Service/metadata
  • Azure/Storage/Admin
  • Azure/Storage/Operator
  • Azure/Storage/Metadata
  • Azure/Synapse Analytics/admin
  • Azure/Synapse Analytics/operator
  • Azure/Synapse Analytics/metadata

IAM Role: Azure/PostgreSQL/admin

PermissionGrant
microsoft.dbforpostgresql/flexibleservers/administrators/actionadmin
microsoft.dbforpostgresql/flexibleservers/administrators/deleteadmin
microsoft.dbforpostgresql/flexibleservers/administrators/writeadmin
microsoft.dbforpostgresql/flexibleservers/advancedthreatprotectionsettings/writeadmin
microsoft.dbforpostgresql/flexibleservers/configurations/writeadmin
microsoft.dbforpostgresql/flexibleservers/databases/deleteadmin
microsoft.dbforpostgresql/flexibleservers/databases/writeadmin
microsoft.dbforpostgresql/flexibleservers/deleteadmin
microsoft.dbforpostgresql/flexibleservers/firewallrules/deleteadmin
microsoft.dbforpostgresql/flexibleservers/firewallrules/writeadmin
microsoft.dbforpostgresql/flexibleservers/migrations/deleteadmin
microsoft.dbforpostgresql/flexibleservers/migrations/writeadmin
microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/deleteadmin
microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/validate/actionadmin
microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/writeadmin
microsoft.dbforpostgresql/flexibleservers/privateendpointconnections/deleteadmin
microsoft.dbforpostgresql/flexibleservers/privateendpointconnections/writeadmin
microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/diagnosticsettings/writeadmin
microsoft.dbforpostgresql/flexibleservers/writeadmin
microsoft.dbforpostgresql/servers/virtualnetworkrules/writeadmin
microsoft.dbforpostgresql/servers/virtualnetworkrules/deleteadmin
microsoft.dbforpostgresql/servers/writeadmin
microsoft.dbforpostgresql/servers/deleteadmin
microsoft.dbforpostgresql/servers/updateconfigurations/actionadmin
microsoft.dbforpostgresql/servers/firewallrules/writeadmin
microsoft.dbforpostgresql/servers/firewallrules/deleteadmin
microsoft.dbforpostgresql/servers/securityalertpolicies/writeadmin
microsoft.dbforpostgresql/servers/providers/microsoft.insights/diagnosticsettings/writeadmin
microsoft.dbforpostgresql/servers/configurations/writeadmin
microsoft.dbforpostgresql/servers/advisors/recommendedactionsessions/actionadmin
microsoft.dbforpostgresql/servers/databases/writeadmin
microsoft.dbforpostgresql/servers/databases/deleteadmin
microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/diagnosticsettings/writeadmin
microsoft.dbforpostgresql/serversv2/writeadmin
microsoft.dbforpostgresql/serversv2/updateconfigurations/actionadmin
microsoft.dbforpostgresql/serversv2/firewallrules/writeadmin
microsoft.dbforpostgresql/serversv2/firewallrules/deleteadmin
microsoft.dbforpostgresql/serversv2/configurations/writeadmin
microsoft.dbforpostgresql/servers/administrators/writeadmin
microsoft.dbforpostgresql/servers/administrators/deleteadmin
microsoft.dbforpostgresql/servers/privateendpointconnections/deleteadmin
microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/writeadmin
microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/deleteadmin
microsoft.dbforpostgresql/flexibleservers/checkmigrationnameavailability/actionoperator
microsoft.dbforpostgresql/flexibleservers/resetqueryperformanceinsightdata/actionoperator
microsoft.dbforpostgresql/flexibleservers/restart/actionoperator
microsoft.dbforpostgresql/flexibleservers/start/actionoperator
microsoft.dbforpostgresql/flexibleservers/stop/actionoperator
microsoft.dbforpostgresql/flexibleservers/waitstatistics/actionoperator
microsoft.dbforpostgresql/servers/querytexts/actionoperator
microsoft.dbforpostgresql/servers/restart/actionoperator
microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/validate/actionoperator
microsoft.dbforpostgresql/flexibleservers/administrators/readmetadata
microsoft.dbforpostgresql/flexibleservers/advancedthreatprotectionsettings/readmetadata
microsoft.dbforpostgresql/flexibleservers/advisors/readmetadata
microsoft.dbforpostgresql/flexibleservers/advisors/recommendedactions/readmetadata
microsoft.dbforpostgresql/flexibleservers/backups/readmetadata
microsoft.dbforpostgresql/flexibleservers/capabilities/readmetadata
microsoft.dbforpostgresql/flexibleservers/configurations/readmetadata
microsoft.dbforpostgresql/flexibleservers/databases/readmetadata
microsoft.dbforpostgresql/flexibleservers/firewallrules/readmetadata
microsoft.dbforpostgresql/flexibleservers/migrations/readmetadata
microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/readmetadata
microsoft.dbforpostgresql/flexibleservers/privateendpointconnections/readmetadata
microsoft.dbforpostgresql/flexibleservers/privatelinkresources/readmetadata
microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.dbforpostgresql/flexibleservers/querystatistics/readmetadata
microsoft.dbforpostgresql/flexibleservers/querytexts/readmetadata
microsoft.dbforpostgresql/flexibleservers/readmetadata
microsoft.dbforpostgresql/flexibleservers/replicas/readmetadata
microsoft.dbforpostgresql/flexibleservers/topquerystatistics/readmetadata
microsoft.dbforpostgresql/locations/performancetiers/readmetadata
microsoft.dbforpostgresql/servers/virtualnetworkrules/readmetadata
microsoft.dbforpostgresql/servers/readmetadata
microsoft.dbforpostgresql/performancetiers/readmetadata
microsoft.dbforpostgresql/servers/firewallrules/readmetadata
microsoft.dbforpostgresql/servers/securityalertpolicies/readmetadata
microsoft.dbforpostgresql/servers/recoverableservers/readmetadata
microsoft.dbforpostgresql/servers/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.dbforpostgresql/servers/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.dbforpostgresql/servers/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.dbforpostgresql/servers/topquerystatistics/readmetadata
microsoft.dbforpostgresql/servers/configurations/readmetadata
microsoft.dbforpostgresql/servers/waitstatistics/readmetadata
microsoft.dbforpostgresql/servers/advisors/readmetadata
microsoft.dbforpostgresql/servers/advisors/recommendedactions/readmetadata
microsoft.dbforpostgresql/servers/querytexts/readmetadata
microsoft.dbforpostgresql/locations/securityalertpoliciesazureasyncoperation/readmetadata
microsoft.dbforpostgresql/locations/securityalertpoliciesoperationresults/readmetadata
microsoft.dbforpostgresql/locations/operationresults/readmetadata
microsoft.dbforpostgresql/locations/operationresults/readmetadata
microsoft.dbforpostgresql/locations/azureasyncoperation/readmetadata
microsoft.dbforpostgresql/servers/databases/readmetadata
microsoft.dbforpostgresql/servers/logfiles/readmetadata
microsoft.dbforpostgresql/operations/readmetadata
microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.dbforpostgresql/serversv2/readmetadata
microsoft.dbforpostgresql/serversv2/deletemetadata
microsoft.dbforpostgresql/serversv2/firewallrules/readmetadata
microsoft.dbforpostgresql/serversv2/configurations/readmetadata
microsoft.dbforpostgresql/servers/administrators/readmetadata
microsoft.dbforpostgresql/servers/replicas/readmetadata
microsoft.dbforpostgresql/servers/privateendpointconnections/readmetadata
microsoft.dbforpostgresql/servers/privateendpointconnections/writemetadata
microsoft.dbforpostgresql/locations/privateendpointconnectionoperationresults/readmetadata
microsoft.dbforpostgresql/locations/privateendpointconnectionazureasyncoperation/readmetadata
microsoft.dbforpostgresql/locations/privateendpointconnectionproxyoperationresults/readmetadata
microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/readmetadata
microsoft.dbforpostgresql/locations/privateendpointconnectionproxyazureasyncoperation/readmetadata
microsoft.dbforpostgresql/servers/privatelinkresources/readmetadata
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
50
Mods
204
Resource Types
3,575
Policies
1,941
Controls
103
Quick Actions
111
IAM