Halaman ini menjelaskan cara melihat dan menerapkan rekomendasi tentang
mengaktifkan audit database untuk instance yang tidak mencatat koneksi dan pernyataan
pengguna. Pengauditan database memungkinkan Anda memantau tindakan pengguna tertentu dalam database untuk membantu keamanan dan kepatuhan. Rekomendasi ini disebut Aktifkan audit database.
Setiap hari, sistem pemberi rekomendasi ini secara proaktif mendeteksi instance yang tidak mencatat koneksi dan pernyataan pengguna, serta memberikan insight dan rekomendasi untuk meningkatkan keamanan dan kepatuhan instance Anda. Anda dapat melihat insight dan rekomendasi mendetail tentang instance ini menggunakan konsol Google Cloud , gcloud CLI, atau Recommender API.
GET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/recommenders/google.cloudsql.instance.SecurityRecommender/recommendations?filter=recommenderSubtype=ENABLE_DATABASE_AUDITING
Ganti kode berikut:
PROJECT_ID: Project ID Anda.
LOCATION: Region tempat instance Anda berada, seperti us-central1.
Lihat insight dan rekomendasi mendetail
Untuk melihat insight dan rekomendasi mendetail, ikuti langkah-langkah berikut:
Konsol
Setelah mencantumkan rekomendasi, klik rekomendasi.
Panel rekomendasi akan muncul, yang berisi insight dan rekomendasi mendetail.
GET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/insightTypes/google.cloudsql.instance.SecurityInsight/insights?filter=insightSubtype=DATABASE_AUDITING_NOT_ENABLED
Ganti kode berikut:
PROJECT_ID: Project ID Anda.
LOCATION: Region tempat instance Anda berada, seperti us-central1.
Menerapkan rekomendasi
Konsol
Untuk menerapkan rekomendasi, klik Edit Instance dan aktifkan audit database di instance Anda.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-04 UTC."],[],[],null,["# Improve instance security by enabling database auditing\n\n\u003cbr /\u003e\n\n[MySQL](/sql/docs/mysql/recommender-enable-db-audit \"View this page for the MySQL database engine\") \\| [PostgreSQL](/sql/docs/postgres/recommender-enable-db-audit \"View this page for the PostgreSQL database engine\") \\| SQL Server\n\n\u003cbr /\u003e\n\nThis page describes how to view and implement recommendations about\nenabling database auditing for instances that don't log user\nconnections and statements. Database auditing lets you monitor specific user\nactions in the database to help with security and compliance. This\n[recommender](/recommender/docs/overview) is called **Enable database auditing**.\n\nEvery day, this recommender proactively detects instances that don't\nlog user connections and statements and provides insights and recommendations\nto improve your instance security and compliance. You can view insights and\ndetailed recommendations about these instances by using the Google Cloud console,\n[gcloud CLI](/sdk/gcloud), or the [Recommender API](/recommender/docs/using-api).\n\nBefore you begin\n----------------\n\nEnsure that you [enable the Recommender API](/recommender/docs/enabling).\n\n### Required roles and permissions\n\nTo get the permissions to view and work with insights and recommendations,\nensure that you have the required [Identity and Access Management (IAM) roles](/sql/docs/sqlserver/project-access-control#roles).\n\nFor more information about IAM roles, see [IAM basic and predefined roles reference](/iam/docs/understanding-roles) and [Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access).\n\n\u003cbr /\u003e\n\nList the recommendations\n------------------------\n\nTo list the recommendations, follow these steps: \n\n### Console\n\nTo list recommendations about instance security, follow these steps:\n\n1. Go to the **Cloud SQL Instances** page.\n\n [Go to Cloud SQL Instances](https://console.cloud.google.com/sql/instances)\n2. View the **Issues** column in the instance table.\n\nAlternatively, follow these steps:\n\n1. Go to the **Recommendation Hub**.\n\n [Go to the Recommendation Hub](https://console.cloud.google.com/home/recommendations/)\n\n For more information, see [Exploring recommendations](/recommender/docs/recommendation-hub/identify-configuration-problems).\n2. In the **All recommendations** card, click **Security**.\n\n### gcloud\n\nRun the [`gcloud recommender recommendations list`](/sdk/gcloud/reference/recommender/recommendations/list) command as follows: \n\n```\ngcloud recommender recommendations list \\\n--project=PROJECT_ID \\\n--location=LOCATION \\\n--recommender=google.cloudsql.instance.SecurityRecommender \\\n--filter=recommenderSubtype=ENABLE_DATABASE_AUDITING\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: A region where your instances are located, such as us-central1.\n\n### API\n\nCall the [`recommendations.list`](/recommender/docs/reference/rest/v1beta1/projects.locations.recommenders.recommendations/list) method as follows: \n\n```\nGET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/recommenders/google.cloudsql.instance.SecurityRecommender/recommendations?filter=recommenderSubtype=ENABLE_DATABASE_AUDITING\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: A region where your instances are located, such as `us-central1`.\n\nView insights and detailed recommendations\n------------------------------------------\n\nTo view insights and detailed recommendations, follow these steps: \n\n### Console\n\nAfter listing the recommendations, click a recommendation.\nThe recommendation panel appears, which contains insights and detailed recommendations.\n\n### gcloud\n\nRun the [`gcloud recommender insights list`](/sdk/gcloud/reference/recommender/insights/list) command as follows: \n\n```\n\ngcloud recommender insights list \\\n--project=PROJECT_ID \\\n--location=LOCATION \\\n--insight-type=google.cloudsql.instance.SecurityInsight \\\n--filter=insightSubtype=DATABASE_AUDITING_NOT_ENABLED\n\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e : A region where your instances are located, such as `us-central1`.\n\n### API\n\nCall the [`insights.list`](/recommender/docs/reference/rest/v1beta1/projects.locations.insightTypes.insights/list) method as follows: \n\n```\n\nGET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/insightTypes/google.cloudsql.instance.SecurityInsight/insights?filter=insightSubtype=DATABASE_AUDITING_NOT_ENABLED\n\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: A region where your instances are located, such as `us-central1`.\n\nApply the recommendation\n------------------------\n\n### Console\n\nTo implement the recommendation, click **Edit Instance** and [enable database auditing](/sql/docs/sqlserver/db-audit) on your instance.\n\n### gcloud\n\nTo implement the recommendation, [enable database auditing](/sql/docs/sqlserver/db-audit) on your instance.\n\n### API\n\nTo implement the recommendation, [enable database auditing](/sql/docs/sqlserver/db-audit) on your instance.\n\nWhat's next\n-----------\n\n- [Enable database auditing](/sql/docs/sqlserver/db-audit)\n- [Google Cloud recommenders](/recommender/docs/recommenders)\n- [Blog: Maximize your Cloud ROI](https://cloud.google.com/blog/products/management-tools/active-assist-comes-to-google-cloud)"]]
