Google Cloud Compliance ControlsGoogle Cloud SQL
Cloud SQL PostgreSQL instances should have 'log_parser_stats' set to 'off'
The PostgreSQL planner/optimizer parses and verifies the syntax of each query. The `log_parser_stats` flag controls the inclusion of parser performance statistics in the PostgreSQL logs for each query. This control checks that it is set to 'off'.
What this control checks
Cloud SQL PostgreSQL instances must have the log_parser_stats database flag set to 'off'.
Framework mappings
The clauses this control is mapped to in each framework.
- 6.2.9 Ensure 'log_parser_stats' database flag for Cloud SQL PostgreSQL instance is set to 'off'
Related controls
- Cloud SQL PostgreSQL instances should have 'log_executor_stats' set to 'off'
- Cloud SQL PostgreSQL instances should have 'log_statement' set to 'ddl'
- Cloud SQL SQL Server instances should have 'user connections' configured
- Cloud SQL SQL Server instances should have 'cross db ownership chaining' set to 'off'
- Cloud SQL SQL Server instances should have '3625 (trace flag)' set to 'on'
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
sql_instance_postgresql_log_parser_stats_database_flag_off - Checkov Check:
CKV2_GCP_15 - Powerpipe Control:
gcp_compliance.control.sql_instance_postgresql_log_parser_stats_database_flag_off
Last reviewed: 2026-10-10