Google Cloud Compliance ControlsGoogle Cloud SQL
Cloud SQL PostgreSQL instances should have 'log_executor_stats' set to 'off'
The PostgreSQL executor is responsible to execute the plan handed over by the PostgreSQL planner. The `log_executor_stats` flag controls the inclusion of PostgreSQL executor performance statistics in the PostgreSQL logs for each query.
What this control checks
Cloud SQL PostgreSQL log_executor_stats database flag must be set to off.
Framework mappings
The clauses this control is mapped to in each framework.
- 6.2.11 Ensure 'log_executor_stats' database flag for Cloud SQL PostgreSQL instance is set to 'off'
Related controls
- Cloud SQL PostgreSQL instances should have 'log_duration' set to 'on'
- Cloud SQL PostgreSQL instances should have 'log_temp_files' set to '0'
- Cloud SQL PostgreSQL instances should have 'log_min_error_statement' set to 'Error' or stricter
- Cloud SQL PostgreSQL instances should have 'log_min_duration_statement' set to '-1' (disabled)
- Cloud SQL SQL Server instances should have '3625 (trace flag)' set to 'off'
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
sql_instance_postgresql_log_executor_stats_database_flag_off - Powerpipe Control:
gcp_compliance.control.sql_instance_postgresql_log_executor_stats_database_flag_off
Last reviewed: 2026-10-10