Policy: GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.03 - SQL Server > 6.03.02 - Ensure 'cross db ownership chaining' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

Configures auditing against a CIS Benchmark item.

Level: 1

It is recommended to set cross db ownership chaining database flag for Cloud SQL SQL Server instance to off.

This flag is deprecated for all SQL Server versions in CGP. Going forward, you can't set its value to on. However, if you have this flag enabled, we strongly recommend that you either remove the flag from your database or set it to off. For cross-database access, use the Microsoft tutorial for signing stored procedures with a certificate.

Targets

This policy targets the following resource types:

GCP > SQL > Instance

Primary Policy

This policy is used with the following primary policy:

GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.03 - SQL Server

Controls

Setting this policy configures this control:

GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.03 - SQL Server > 6.03.02 - Ensure 'cross db ownership chaining' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

Policy Specification

Schema Type	`string`
Default	`Per GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.03 - SQL Server`
Valid Values [YAML]	`Per GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.03 - SQL Server` `Skip` `Check: Benchmark`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/v071406

Policy Type URI

tmod:@turbot/gcp-cisv5-0#/policy/types/r060302

GraphQL

query policyType(id: "tmod:@turbot/gcp-cisv5-0#/policy/types/r060302") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-cisv5-0#/policy/types/r060302'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-cisv5-0#/policy/types/r060302'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-cisv5-0#/policy/types/r060302"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv5-0#/policy/types/r060302"