compliance.tf

Cloud SQL PostgreSQL instances should have 'log_statement_stats' set to 'off'

The log_statement_stats flag controls the inclusion of end-to-end performance statistics of a SQL query in the PostgreSQL logs for each query. This cannot be enabled with other module statistics (log_parser_stats, log_planner_stats, log_executor_stats).

What this control checks

Cloud SQL PostgreSQL instances must have the log_statement_stats database flag set to off.

Framework mappings

The clauses this control is mapped to in each framework.

CIS GCP Benchmark v1.2.0

  • 6.2.12 Ensure 'log_statement_stats' database flag for Cloud SQL PostgreSQL instance is set to 'off'

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: sql_instance_postgresql_log_statement_stats_database_flag_off
  • Powerpipe Control: gcp_compliance.control.sql_instance_postgresql_log_statement_stats_database_flag_off

Last reviewed: 2026-10-10

View all Google Cloud controls →

On this page

Ask AI about this

Help improve this page