Ensure that all your production and mission-critical Google Cloud SQL database instances are configured for High Availability (HA) and automatic failover support.
This rule resolution is part of the Conformity Security & Compliance tool for GCP.
When a High Availability (HA) configuration (also known as database cluster) is enabled, the Google Cloud SQL service provides data redundancy in the event of an outage or a planned maintenance session. A Cloud SQL database instance configured for high availability is also called a regional instance, being deployed to a primary and a secondary zone within the configured Google Cloud region. For a regional database instance, the redundant configuration consists of a primary instance (i.e. master) and a standby instance. Through synchronous replication to each zone's persistent disk, all writes made to the primary instance are also made to the standby instance. In the event of an instance, network, or zone failure, the HA configuration reduces downtime and facilitates the availability of your data to client applications.
Audit
To determine if your production Cloud SQL database instances are configured for high availability, perform the following operations:
Remediation / Resolution
To configure your production and mission-critical Cloud SQL instances for High Availability (HA) and automatic failover support, perform the following operations:
References
- Google Cloud Platform (GCP) Documentation
- Instance settings
- Overview of the high availability configuration
- Enabling and disabling high availability on an instance
- GCP Command Line Interface (CLI) Documentation
- gcloud projects list
- gcloud sql instances list
- gcloud sql instances describe
- gcloud sql instances patch
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
You are auditing:
Enable High Availability for Cloud SQL Database Instances
Risk Level: High