More Info:

Ensure that the cross db ownership chaining database flag for Cloud SQL SQL Server instance is set to off.

Risk Level

Medium

Address

Security

Compliance Standards

CISGCP, CBP

Triage and Remediation

Remediation

To remediate the “Cross DB Ownership Chaining Should Be Disabled” misconfiguration in GCP, you can follow the below steps:

  1. Open the Google Cloud Console and navigate to the Cloud SQL instances page.

  2. Select the instance for which you want to disable cross-database ownership chaining.

  3. Click on the “Edit” button to modify the instance configuration.

  4. In the “Flags” section, click on the “Add item” button to add a new flag.

  5. Enter the flag name as “cross_db_ownership_chaining” and set its value to “off”.

  6. Click on the “Save” button to save the changes.

  7. Restart the instance for the changes to take effect.

Once the instance is restarted, cross-database ownership chaining will be disabled.