More Info:

Ensure that the log_disconnections database flag for Cloud SQL PostgreSQL instance is set to on.

Risk Level

Medium

Address

Security

Compliance Standards

CISGCP, CBP, SOC2, NISTCSF, PCIDSS

Triage and Remediation

Remediation

To remediate the PostgreSQL Log Disconnections Flag misconfiguration on GCP using the GCP console, please follow the steps below:

  1. Open the GCP console and navigate to the Cloud SQL instances page.
  2. Select the instance that has the PostgreSQL database with the misconfiguration.
  3. Click on the “Edit” button at the top of the page to edit the instance settings.
  4. In the “Flags” section, locate the “log_disconnections” flag.
  5. Set the value of “log_disconnections” to “off” to disable the flag.
  6. Click on the “Save” button to save the changes.

Once the changes are saved, the PostgreSQL Log Disconnections Flag misconfiguration will be remediated for the GCP instance.