Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Google > Sql >

Pg Log Disconnections

MEDIUM
Source
Trivy
ID
AVD-GCP-0022
terraform

Ensure that logging of disconnections is enabled.

Logging disconnections provides useful diagnostic data such as session length, which can identify performance issues in an application and potential DoS vectors.

Impact

Insufficient diagnostic data.

Follow the appropriate remediation steps below to resolve the issue.

Enable disconnection logging.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

 resource "google_sql_database_instance" "db" {
 	name             = "db"
 	database_version = "POSTGRES_12"
 	region           = "us-central1"
 	settings {
 		database_flags {
 			name  = "log_disconnections"
 			value = "on"
 		}
 	}
 }
Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use