terraform/ecc-gcp-212-3625-database-flag-for-sql-server/red/sql.tf

resource "random_id" "this" {
  byte_length = 4
}

resource "google_sql_database_instance" "this" {
  name                = "${var.dbname}-${random_id.this.hex}-212-red"
  database_version    = var.dbver
  region              = var.region
  deletion_protection = false
  root_password       = random_password.this.result

  settings {
    user_labels = {
      custodiarule     = "ecc-gcp-212-3625-database-flag-for-sql-server"
      compliancestatus = "red"
    }
    tier = var.tier
    database_flags {
      name  = "3625"
      value = "off"
    }
  }
}

resource "random_password" "this" {
  length           = 12
  special          = true
  override_special = "_%@"
}