Best practices

SQL Server instance with ‘3625’ trace flag disabled

Description

We have found that {GcpSQLInstance} has '3625' trace flag disabled. 3625 (trace log) Limits the amount of information returned to users who are not members of the sysadmin fixed server role, by masking the parameters of some error messages using '******'. This can help prevent disclosure of sensitive information, hence this is recommended to enable this flag.
  • Recommended Mitigation

    Make sure '3625' trace flag is set to 'on'. For further information, visit: <a href="https://cloud.google.com/sql/docs/sqlserver/flags" target="_blank" rel="noopener noreferrer">https://cloud.google.com/sql/docs/sqlserver/flags</a>