Trigger: Detect & correct PostgreSQL servers with SSL disabled

select
  concat(
    db.id,
    ' [',
    db.subscription_id,
    '/',
    db.resource_group,
    ']'
  ) as title,
  db.id as id,
  db.name,
  db.resource_group,
  db.subscription_id,
  db._ctx ->> 'connection_name' as conn
from
  azure_postgresql_server as db,
  azure_subscription as sub
where
  ssl_enforcement = 'Disabled'
  and sub.subscription_id = db.subscription_id;