TF 0514 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Ensure that logging of checkpoints is enabled.

Property Value
Language terraform
Severity medium
Service sql
Provider Google
Vulnerability Type omission

Description

Checkpoint logging is disabled for the PostgreSQL database instance, preventing collection of key diagnostic information about database write operations. This limits visibility into performance issues and potential denial-of-service (DoS) attack vectors.

Impact

Without checkpoint logs, root causes of database slowdowns, outages, or attacks may go undetected, delaying incident response and increasing the risk of prolonged downtime or data loss. Attackers exploiting performance weaknesses may remain unnoticed, putting the integrity and availability of the application at risk.

Resolution

Enable checkpoints logging.