---
names: 
  full: "Google Cloud PostgreSQL Instance Log_statement Database Flag is not set appropriately"
  contextual: "PostgreSQL Instance Log_statement Database Flag is not set appropriately"
description: "The value of log_statement flag determined the SQL statements that are logged. Valid \ 
 values are: none, ddl, mod, all. The value ddl logs all data definition statements. The value mod \ 
 logs all ddl statements, plus data-modifying statements. The statements are logged after a basic \ 
 parsing is done and statement type is determined, thus this does not logs statements with errors. \ 
 When using extended query protocol, logging occurs after an Execute message is received and values \ 
 of the Bind parameters are included. A value of 'ddl' is recommended unless otherwise directed by \ 
 your organization's logging policy."
type: COMPLIANCE_POLICY
categories:
  - "RELIABILITY"
frameworkMappings:
  - /frameworks/cis-gcp-v4.0.0/06/02/04
  - /frameworks/cloudaware/logging-and-monitoring/logging-and-monitoring-configuration
  - /frameworks/nist-sp-800-53-r5/au/12
  - /frameworks/nist-sp-800-53-r5/au/03
  - /frameworks/nist-sp-800-53-r5/au/07
  - /frameworks/pci-dss-v4.0/10/02/01
  - /frameworks/pci-dss-v4.0/10/02/01/02
  - /frameworks/pci-dss-v4.0/10/02/01/05
  - /frameworks/pci-dss-v4.0/09/04/05
  - /frameworks/iso-iec-27001-2022/05/28
  - /frameworks/iso-iec-27001-2022/08/15
  - /frameworks/nist-csf-v1.1/de-ae/03
  - /frameworks/nist-csf-v1.1/de-cm/01
  - /frameworks/soc-2/cc5/02/03
  - /frameworks/soc-2/cc7/02/01
  - /frameworks/soc-2/cc7/02/02
  - /frameworks/soc-2/cc7/02/03
similarPolicies:
  cloudConformity:
    - url: "https://www.trendmicro.com/cloudoneconformity-staging/knowledge-base/gcp/CloudSQL/configure-log-statement-flag.html"
      name: "Configure 'log_statement' Flag for PostgreSQL Database Instances"