TF 0127 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Ensure that logging of lock waits is enabled.

Property Value
Language terraform
Severity medium
Service sql
Provider Google
Vulnerability Type omission

Description

Lock wait logging is disabled for the Google Cloud SQL PostgreSQL instance, preventing the system from recording events where database operations are blocked waiting for locks. This omission makes it difficult to detect and analyze performance bottlenecks or suspicious activity related to resource contention.

Impact

Without lock wait logs, administrators may miss signs of performance degradation or denial-of-service conditions caused by excessive locking. This can allow attackers or misbehaving applications to degrade service availability undetected, potentially leading to prolonged outages or security incidents.

Resolution

Enable lock wait logging.