Control: GCP SQL instance should be using latest major database version

Description

This control checks whether the GCP SQL instance is using the latest major database version.

Usage

Run the control in your terminal:

powerpipe control run terraform_gcp_compliance.control.sql_instance_using_latest_major_database_version

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_gcp_compliance.control.sql_instance_using_latest_major_database_version --share

SQL

This control uses a named query:

select
  address as resource,
  case
    when (attributes_std ->> 'database_version') in ('POSTGRES_15', 'MYSQL_8_0', 'SQLSERVER_2019_STANDARD', 'SQLSERVER_2019_WEB', 'SQLSERVER_2019_ENTERPRISE', 'SQLSERVER_2019_EXPRESS') then 'ok'
    else 'alarm'
  end as status,
  split_part(address, '.', 2) || case
    when (attributes_std ->> 'database_version') in ('POSTGRES_15', 'MYSQL_8_0', 'SQLSERVER_2019_STANDARD', 'SQLSERVER_2019_WEB', 'SQLSERVER_2019_ENTERPRISE', 'SQLSERVER_2019_EXPRESS') then ' latest major database version in use'
    else ' latest major database version not in use'
  end || '.' reason
  , path || ':' || start_line
from
  terraform_resource
where
  type = 'google_sql_database_instance';

Control: GCP SQL instance should be using latest major database version

Description

Usage

SQL

Tags