turbot/gcp_compliance

Query: sql_instance_sql_3625_trace_database_flag_on

Usage

powerpipe query gcp_compliance.query.sql_instance_sql_3625_trace_database_flag_on

SQL

select
self_link as resource,
case
when database_version not like 'SQLSERVER%' then 'skip'
when database_flags @> '[{"name":"3625","value":"on"}]' then 'ok'
else 'alarm'
end as status,
case
when database_version not like 'SQLSERVER%' then title || ' not a SQL Server database.'
when database_flags is null or not (database_flags @> '[{"name":"3625"}]') then title || ' ''3625 (trace flag)'' not set.'
when database_flags @> '[{"name":"3625","value":"on"}]' then title || ' ''3625 (trace flag)'' database flag set to ''on''.'
else title || ' ''3625 (trace flag)'' database flag set to ''off''.'
end as reason
, location as location, project as project
from
gcp_sql_database_instance;

Controls

The query is being used by the following controls: