Description

We have found that {GcpSQLInstance} has '3625' trace flag disabled. 3625 (trace log) Limits the amount of information returned to users who are not members of the sysadmin fixed server role, by masking the parameters of some error messages using '******'. This can help prevent disclosure of sensitive information, hence this is recommended to enable this flag.

• 

  Recommended Mitigation

  Make sure '3625' trace flag is set to 'on'. For further information, visit: <a href="https://cloud.google.com/sql/docs/sqlserver/flags" target="_blank" rel="noopener noreferrer">https://cloud.google.com/sql/docs/sqlserver/flags</a>