Control: GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.03 - SQL Server > 6.03.02 - Ensure 'cross db ownership chaining' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

Configures auditing against a CIS Benchmark item.

Level: 1

It is recommended to set cross db ownership chaining database flag for Cloud SQL SQL Server instance to off.

This flag is deprecated for all SQL Server versions in CGP. Going forward, you can't set its value to on. However, if you have this flag enabled, we strongly recommend that you either remove the flag from your database or set it to off. For cross-database access, use the Microsoft tutorial for signing stored procedures with a certificate.

Resource Types

This control targets the following resource types:

GCP > SQL > Instance

Policies

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-cisv5-0#/control/types/r060302

Category URI

tmod:@turbot/cis#/control/categories/v071406

GraphQL

query controlType(id: "tmod:@turbot/gcp-cisv5-0#/control/types/r060302") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-cisv5-0#/control/types/r060302'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-cisv5-0#/control/types/r060302"