This page describes what you, as a Cloud SQL customer, are responsible for and what Google is responsible for.

## Introduction

Cloud SQL is a fully managed database service that simplifies deployment, maintenance, and management of relational databases in the cloud. Cloud SQL offers meaningful insights and manageability features, significantly reducing user toil.

As a Cloud SQL customer, you are responsible for configuring and operating Cloud SQL for your workload needs to get the most value from the service.

## Google's responsibilities

- Provision and maintain the underlying infrastructure, including hardware, firmware, kernel, OS, storage, network and more:
  - [Secure](https://docs.cloud.google.com/docs/security/infrastructure/design.md.txt#secure_low_level_infrastructure) the low-level infrastructure, which includes the physical premises, the hardware in Google data centers, and the low-level software stack running on the machines.
  - Encrypt data in a Cloud SQL instance [at rest](https://docs.cloud.google.com/docs/security/encryption/default-encryption.md.txt) by default and enable customer-managed encryption [in transit](https://docs.cloud.google.com/docs/security/encryption-in-transit.md.txt).
- Install and [maintain](https://docs.cloud.google.com/sql/docs/mysql/maintenance.md.txt) the database software.
  - Provide configuration and tools to secure your Cloud SQL instance.
  - Provide limited access to database-specific functionality available to customers using flags, stored procedures, and plugins.
  - Increase instance storage capacity for instances configured to [enable automatic storage increase](https://docs.cloud.google.com/sql/docs/mysql/instance-settings.md.txt#automatic-storage-increase-2ndgen).
  - Provide maintenance notifications, allow maintenance deferrals, and set maintenance denial periods.
  - Apply database vendor-provided fixes to instances as part of scheduled maintenance.
  - Make database vendor-provided fixes for known security vulnerabilities available for customers to apply proactively using self-service maintenance
- Provide monitoring telemetry for various instance components including but not limited to:
  - CPU
  - Storage
  - Network
  - Memory
  - User connections
- Provide [disaster recovery](https://docs.cloud.google.com/sql/docs/mysql/intro-to-cloud-sql-disaster-recovery.md.txt) capabilities in case of region outages for instances configured with cross-region read replicas and instances configured with multi-region or cross-region backups.
- Provide high availability in case of zonal outages on instances configured for [high availability (HA)](https://docs.cloud.google.com/sql/docs/mysql/high-availability.md.txt).
- Provide actionable insights into instance sizing and idleness for cost optimization with the [Recommender service](https://docs.cloud.google.com/sql/docs/mysql/recommender-sql-idle.md.txt).
- Provide Google Cloud integrations for [Identity and Access Management (IAM)](https://docs.cloud.google.com/sql/docs/mysql/iam-overview), [tags](https://docs.cloud.google.com/sql/docs/mysql/tags.md.txt), [Cloud Logging](https://docs.cloud.google.com/sql/docs/mysql/logging.md.txt), [Cloud Key Management Service](https://docs.cloud.google.com/sql/docs/mysql/configure-cmek.md.txt) and [Network Intelligence Center](https://docs.cloud.google.com/network-intelligence-center/docs.md.txt).

## Customer responsibilities

- [Create](https://docs.cloud.google.com/sql/docs/mysql/create-instance.md.txt) instances with the appropriate version, location, size and [database flags](https://docs.cloud.google.com/sql/docs/mysql/flags.md.txt).
- Create and administer databases and any user-created code on the instance.
- [Secure](https://docs.cloud.google.com/sql/docs/mysql/instance-access-control.md.txt) access, authentication, and authorization using appropriate controls.
- Configure and troubleshoot connectivity from client-side tooling to the Cloud SQL instance.
- Configure the Cloud SQL instance for [high availability](https://docs.cloud.google.com/sql/docs/mysql/high-availability.md.txt) and zonal/regional [disaster recovery](https://docs.cloud.google.com/sql/docs/mysql/intro-to-cloud-sql-disaster-recovery.md.txt).
- Use the [maintenance features](https://docs.cloud.google.com/sql/docs/mysql/maintenance.md.txt) to control the business impact from maintenance events.
- Manage, tune, and optimize the database performance based on the workload and instance configuration.
- Configure [storage capacity](https://docs.cloud.google.com/sql/docs/mysql/instance-settings.md.txt#storage-capacity-2ndgen) to accommodate future growth necessary for critical database maintenance events.