Property
Languageterraform
Severitymedium
Servicesql
ProviderGoogle
Vulnerability Typeomission

Description#

Automated backups are not enabled for Google Cloud SQL instances, leaving databases without a way to recover from accidental data loss or corruption. The Terraform configuration sets ‘backup_configuration.enabled’ to false or omits it entirely, resulting in no backup snapshots being created.

Impact#

Without automated backups, any data loss, corruption, or malicious deletion is irreversible, potentially leading to permanent loss of critical business data and service downtime. The inability to restore data can severely impact business continuity and violate data retention policies.

Resolution#

Enable automated backups