Control: GCP > CIS v1 > 6 Cloud SQL Database Services > 6.03 Ensure that MySql database instance does not allow anyone to connect with administrative privileges. (Scored)

Configures auditing against a CIS Benchmark item.

Level: 1 (Scored)

It is recommended to set a password for the administrative user (root by default) to prevent unauthorized access to the SQL database Instances. This recommendation is applicable only for MySql Instances. PostgreSQL does not offer any setting for No Password from cloud console.

Resource Types

This control targets the following resource types:

GCP > SQL > Instance

Primary Policies

The following policies can be used to configure this control:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-cisv1#/control/types/r0603

Category URI

tmod:@turbot/cis#/control/categories/v070402

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv1#/control/types/r0603") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv1#/control/types/r0603'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv1#/control/types/r0603"