feat(query): implements "Beta - SQL DB Instance With Minimum Log Duration"

[cx-andre-pereira]

Reason for Proposed Changes

• Currently there is no query to ensure that a "google_sql_database_instance" resource with a "POSTGRES" based "database_version" has the 'log_min_duration_statement' flag set to "-1", which is to say there is no minimum duration whatsoever, all logs are captured.

• Quoting CIS_Google_Cloud_Platform_Foundation_Benchmark_v4.0.0 page 235: "Logging SQL statements may include sensitive information that should not be recorded in logs."

Proposed Changes

• Implemented the missing query.
• The query will flag for a specific instance : (all after ensuring "database_version" is POSTGRES based (possible values list))
  • Setting the "log_min_duration_statement" flag to a value that is not "-1" (default is "-1")

Tenable reference

I submit this contribution under the Apache-2.0 license.

[github-actions]

KICS version: v2.1.13

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 1 Files parsed 1 Files failed to scan 0 Total executed queries 47 Queries failed to execute 0 Execution time 0