MEDIUM
Source
Trivy
ID
AVD-GCP-0025

Ensure that logging of checkpoints is enabled.

Logging checkpoints provides useful diagnostic data, which can identify performance issues in an application and potential DoS vectors.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enable checkpoints logging.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
resource "google_sql_database_instance" "db" {
  name             = "db"
  database_version = "POSTGRES_12"
  region           = "us-central1"
  settings {
    database_flags {
      name  = "log_checkpoints"
      value = "on"
    }
  }
}