Policy: GCP > CIS v3.0 > 6 - Cloud SQL Database Services > 6.02 - PostgreSQL Database

Targets

This policy targets the following resource types:

• GCP > Project

Primary Policy

This policy is used with the following primary policy:

• GCP > CIS v3.0 > 6 - Cloud SQL Database Services

Related Policies

• 6.02.01 - Ensure 'Log_error_verbosity' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'DEFAULT' or Stricter
• 6.2.2 - Ensure That the 'Log_connections' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'On'
• 6.02.03 - Ensure That the 'Log_disconnections' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'On'
• 6.02.04 - Ensure 'Log_statement' Database Flag for Cloud SQL PostgreSQL Instance Is Set Appropriately
• 6.02.05 - Ensure that the 'Log_min_Messages' Flag for a Cloud SQL PostgreSQL Instance is set at minimum to 'Warning'
• 6.02.06 - Ensure 'Log_min_error_statement' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'Error' or Stricter
• 6.02.07 - Ensure That the 'Log_min_duration_statement' Database Flag for Cloud SQL PostgreSQL Instance Is Set to '-1'
• 6.02.08 - Ensure That 'cloudsql.enable_pgaudit' Database Flag for each Cloud Sql Postgresql Instance Is Set to 'on' For Centralized Logging

Policy Specification

string

Per GCP > CIS v3.0 > 6 - Cloud SQL Database Services

Category

• CIS

In Your Workspace

• Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/cis

Policy Type URI

tmod:@turbot/gcp-cisv3-0#/policy/types/s0602

GraphQL

query policyType(id: "tmod:@turbot/gcp-cisv3-0#/policy/types/s0602") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-cisv3-0#/policy/types/s0602'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-cisv3-0#/policy/types/s0602'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-cisv3-0#/policy/types/s0602"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv3-0#/policy/types/s0602"