Ensure that the "user options" database flag is not configured for your Google Cloud SQL Server database instances in order to avoid defining global defaults for all database users.
This rule resolution is part of the Conformity Security & Compliance tool for GCP.
excellence
Once enabled, the "user options" database flag configures global defaults for all database users. A list of default query processing options is established for the duration of a user's work session. The "user options" configuration flag allows you to change the default values of the SET options (if the database server's default settings are not appropriate).
Note: Some database flag settings can affect instance availability and/or stability, and eventually remove the SQL Server instance from the Google Cloud SQL Service Level Agreement (SLA).
Audit
To determine if the "user options" flag is configured for your SQL Server database instances, perform the following operations:
Remediation / Resolution
To disable the "user options" database flag for your Google Cloud SQL Server database instances, perform the following operations:
References
- Google Cloud Platform (GCP) Documentation
- Cloud SQL for SQL Server documentation
- Configure database flags
- Edit instances
- CIS Security Documentation
- Securing Google Cloud Computing Platform
- GCP Command Line Interface (CLI) Documentation
- gcloud projects list
- gcloud sql instances list
- gcloud sql instances describe
- gcloud sql instances patch