Ensure Cross-Shard Operations Are Appropriately Controlled

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

On the SQLEngine run SHOW VARIABLES LIKE 'tdsql_trx_cross_shard_op_whitelist'; If the business does not require cross-shard writes the value must be READ; the default READ,WRITE is acceptable only where cross-shard writes are a documented requirement.

How it is fixed

Fix method: Guidance or infrastructure patch

Configure the allowed operation types according to business needs, minimizing cross- shard write operations: If the business does not require cross-shard writes, set it to READ. If cross-shard writes are required, keep the default READ,WRITE.