feat(query): implements "Beta - SQL DB Instance With Unrecommended Logging Threshold"

[cx-andre-pereira]

Reason for Proposed Changes

• Currently there is no query to ensure that a "google_sql_database_instance" resource with a "POSTGRES" based "database_version" has the 'log_min_messages' flag set to the severity threshold of "WARNING" or higher.

• Quoting CIS_Google_Cloud_Platform_Foundation_Benchmark_v4.0.0 page 229: "Auditing helps in troubleshooting operational problems and also permits forensic analysis. If log_min_messages is not set to the correct value, messages may not be classified as error messages appropriately. Setting the threshold to 'Warning' will log messages for the most needed error messages."

Proposed Changes

• Implemented the missing query.
• The query will flag for a specific instance : (all after ensuring "database_version" is POSTGRES based (possible values list))
  • Setting the "log_min_messages" flag to a value that is not warning or higher: "WARNING"|"ERROR"|"LOG"|"FATAL"|"PANIC" (default value is ERROR)

Tenable reference

I submit this contribution under the Apache-2.0 license.

[github-actions]

KICS version: v2.1.13

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 1 Files parsed 1 Files failed to scan 0 Total executed queries 47 Queries failed to execute 0 Execution time 0

[cx-artur-ribeiro]

Only a quality of life change, if you agree with my suggestion. Rather than that, looks good to me.