Policy: GCP > CIS v1 > 6 Cloud SQL Database Services > 6.03 Ensure that MySql database instance does not allow anyone to connect with administrative privileges. (Scored) > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

Using Command Line:

1. List All SQL database instances of type MySql gcloud sql instances list --filter='DATABASE_VERSION:MYSQL*'
2. For every MySql instance try to connect from authorized network: mysql -u root -h <Instance_IP> Command should return Either Error message or password prompt. Sample Error message: ERROR 1045 (28000): Access denied for user 'root'@'[Inatance_IP]' (using password: NO) If command produces mysql prompt, SQL Instance allows anyone to connect with administrative privileges without needing password. Note: No Password setting is exposed only at the time of MySql Instance Creation. Once Instance is created, Google cloud UI does not exposes setting to confirm whether password for administrative user is set to a mysql instance.

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in GCP > CIS v1 > Maximum Attestation Duration. Set to a blank value to clear the attestation.