TDSQL
TMA-TDSQL-2.9
Ensure a DDL Change Management Process Is Established
LowLevel 2Manual reviewtdsql
Description
Schema changes (DDL) should follow a formal change management process. TDSQL specifies SQL files in the sql/ directory named V[version]_[batch]__[description].sql, which are required to be idempotent and re-entrant.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
# Verify that SQL change files follow the naming convention ls /path/to/tdsql/sql/*/V*.sql # Verify that changes are under version control git log --oneline /path/to/tdsql/sql/
How it is fixed
Fix method: Guidance or infrastructure patch
Establish a DDL change management policy: Submit all changes as SQL files in the V[version]_[batch]__[description].sql format Changes must be idempotent Require review and approval before deployment Test in a non-production environment first
Properties
- Operating systems
- Any
- Tags
- tdsqlchange-management
- Reference
- CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 2.9 Ensure a DDL Change Management Process Is Established