More Info:

Ensure that the log_checkpoints database flag for Cloud SQL PostgreSQL instance is set to on.

Risk Level

Medium

Address

Security

Compliance Standards

SOC2, NISTCSF, PCIDSS

Triage and Remediation

Remediation

To remediate the PostgreSQL Log Checkpoints flag misconfiguration in GCP using the GCP console, follow these steps:

  1. Open the GCP console and navigate to the Cloud SQL Instances page.

  2. Select the instance that has the PostgreSQL database with the misconfiguration.

  3. Click on the “Edit” button on the top of the page.

  4. Scroll down to the “Flags” section and click on the “Add item” button.

  5. In the “Name” field, enter “log_checkpoints” and in the “Value” field, enter “off”.

  6. Click on the “Save” button to save the changes.

  7. Wait for a few minutes for the changes to take effect.

  8. Verify that the PostgreSQL Log Checkpoints flag has been disabled by checking the PostgreSQL logs.

By following these steps, you will have successfully remediated the PostgreSQL Log Checkpoints flag misconfiguration in GCP using the GCP console.