Policy: GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.09 - Ensure Cloud SQL Database Instances Have Deletion Protection Enabled

Configures auditing against a CIS Benchmark item.

Level: 1

Ensure that deletion protection is enabled on all Cloud SQL database instances to prevent accidental or unauthorized deletion. This setting safeguards critical databases by requiring explicit disabling of deletion protection before deletion, reducing the risk of data loss through human error or malicious activity.

Targets

This policy targets the following resource types:

GCP > SQL > Instance

Primary Policy

This policy is used with the following primary policy:

GCP > CIS v5.0 > 6 - Cloud SQL Database Services

Controls

Setting this policy configures this control:

GCP > CIS v5.0 > 6 - Cloud SQL Database Services > 6.09 - Ensure Cloud SQL Database Instances Have Deletion Protection Enabled

Policy Specification

Schema Type	`string`
Default	`Per GCP > CIS v5.0 > 6 - Cloud SQL Database Services`
Valid Values [YAML]	`Per GCP > CIS v5.0 > 6 - Cloud SQL Database Services` `Skip` `Check: Benchmark`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/v071001

Policy Type URI

tmod:@turbot/gcp-cisv5-0#/policy/types/r0609

GraphQL

query policyType(id: "tmod:@turbot/gcp-cisv5-0#/policy/types/r0609") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-cisv5-0#/policy/types/r0609'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-cisv5-0#/policy/types/r0609'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-cisv5-0#/policy/types/r0609"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv5-0#/policy/types/r0609"