- Audit
- CloudSql Audit
Checks performed
- Root User Should Not Be Accessible From Any Host
- Databases Should Have SSL
- Point In Time Restore Should Be Enabled
- DB Instances Should Not Be Publicly Accessible
- Instances Should Be Multi AZ
- Automated Backups Should Be Enabled
- Database Instances Should Not Have Public IPs
- Cross DB Ownership Chaining Should Be Disabled
- Database Authentication Flag Should Be Disabled
- MySQL Local Infile Flag Should Be Disabled
- PostgreSQL Log Checkpoints Flag Should Be Disabled
- PostgreSQL Log Connections Flag Should Be Disabled
- PostgreSQL Log Disconnections Flag Should Be Disabled
- PostgreSQL Log Lock Waits Flag Should Be Disabled
- PostgreSQL Log Min Messages Flag Should Be Disabled
- PostgreSQL Log Temp Files Flag Should Be 0
- PostgreSQL Log Min Duration Statement Flag Should Be -1
- Database SSL Certificate Should Be Rotated After Every 90 Days
- Read Replica Instances Should Not Be public
- Determine SQL Instances Provisioned are of Desired Type
- SQL Instance Should Have Backend Type Second Generation
- SQL Instances Should Be Encrypted Using Customer Managed Keys (CMKs)
- SQL Instances should have Storage Auto Resize Enabled
- Provisioned Instances Should Not Exceed Set Threshold
- SQL Instances Should Not Be Configured with Barred Usernames
- Minimum Number of SQL Backups To Be Retained
- SQL Instances Should Be Configured with the Latest SQL Versions
- SQL Read Replica Instances Should Be Encrypted Using Customer Managed Keys (CMKs)
- SQL Backup Configuration Should Be Enabled
- SQL Instances Should Have Maintenance Scheduled Within the Next 30 Day
- SQL Query Insights should be Enabled
- SQL Instances Should Have Binary Logging Enabled