AlloyDB instances should have 'log_min_messages' set to warning or higher
The log_min_messages flag defines the minimum message severity level that is considered as an error statement. Messages for error statements are logged with the SQL statement. Each severity level includes the subsequent levels mentioned above.
The log_min_messages flag defines the minimum message severity level that is considered as an error statement. Messages for error statements are logged with the SQL statement.
What this control checks
Checks the log_min_messages database flag on AlloyDB instances
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control gcp_compliance.control.alloydb_instance_log_min_messages_database_flag_error.
Framework-specific interpretation
SOC 2: Mapped to CC7.2 (The entity monitors system components and the operation of those components for anomalies that are indicative of...).
NIST SP 800-53 Rev 5: Mapped to AU-12 (Audit Record Generation), AU-3 (Content of Audit Records) and AU-7 (Audit Record Reduction And Report Generation).
Framework mappings
The clauses this control is mapped to in each framework.
- CC7.2: The entity monitors system components and the operation of those components for anomalies that are indicative of malicious acts, natural disasters, and errors affecting the entity's ability to meet its objectives; anomalies are analyzed to determine whether they represent security events.
- AU-3 Content of Audit Records
- AU-7 Audit Record Reduction And Report Generation
- AU-12 Audit Record Generation
NIST Cybersecurity Framework v1.0
- DE.AE-3: Event data are collected and correlated from multiple sources and sensors.
- DE.CM-1: The network is monitored to detect potential cybersecurity events.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
alloydb_instance_log_min_messages_database_flag_error - Powerpipe Control:
gcp_compliance.control.alloydb_instance_log_min_messages_database_flag_error
Last reviewed: 2026-10-09