Google Cloud Compliance ControlsGoogle Cloud AlloyDB for PostgreSQL
AlloyDB instances should have 'log_min_messages' set to warning or higher
The log_min_messages flag defines the minimum message severity level that is considered as an error statement. Messages for error statements are logged with the SQL statement. Each severity level includes the subsequent levels mentioned above.
What this control checks
Checks the log_min_messages database flag on AlloyDB instances
Framework mappings
The clauses this control is mapped to in each framework.
- CC7.2: The entity monitors system components and the operation of those components for anomalies that are indicative of malicious acts, natural disasters, and errors affecting the entity's ability to meet its objectives; anomalies are analyzed to determine whether they represent security events.
- AU-3 Content of Audit Records
- AU-7 Audit Record Reduction And Report Generation
- AU-12 Audit Record Generation
NIST Cybersecurity Framework v1.0
- DE.AE-3: Event data are collected and correlated from multiple sources and sensors.
- DE.CM-1: The network is monitored to detect potential cybersecurity events.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
alloydb_instance_log_min_messages_database_flag_error - Powerpipe Control:
gcp_compliance.control.alloydb_instance_log_min_messages_database_flag_error
Last reviewed: 2026-10-09