fix: checkov security error

modules/mysql/sql.tf

@@ -3,13 +3,29 @@ resource "random_id" "this" {
   byte_length = 4
 }
 
+resource "google_storage_bucket" "logging_bucket" {
+  name          = "bucket-access-logs"
+  location      = "europe-west3"
+  project       = var.project_id
+  force_destroy = true
+}
+
 resource "google_storage_bucket" "script" {
-  count                    = var.init_custom_sql_script != "" ? 1 : 0
-  name                     = "sql-script-${random_id.this[0].hex}"
-  location                 = "europe-west3"
-  force_destroy            = true
-  project                  = var.project_id
-  public_access_prevention = "enforced"
+  count                       = var.init_custom_sql_script != "" ? 1 : 0
+  name                        = "sql-script-${random_id.this[0].hex}"
+  location                    = "europe-west3"
+  force_destroy               = true
+  project                     = var.project_id
+  public_access_prevention    = "enforced"
+  uniform_bucket_level_access = true
+  versioning {
+    enabled = true
+  }
+
+  logging {
+    log_bucket        = google_storage_bucket.logging_bucket.name
+    log_object_prefix = "access_logs/"
+  }
 }
 
 resource "google_storage_bucket_object" "sql_script" {

modules/postgresql/sql.tf

@@ -3,13 +3,29 @@ resource "random_id" "this" {
   byte_length = 4
 }
 
+resource "google_storage_bucket" "logging_bucket" {
+  name          = "bucket-access-logs"
+  location      = "europe-west3"
+  project       = var.project_id
+  force_destroy = true
+}
+
 resource "google_storage_bucket" "script" {
-  count                    = var.init_custom_sql_script != "" ? 1 : 0
-  name                     = "sql-script-${random_id.this[0].hex}"
-  location                 = "europe-west3"
-  force_destroy            = true
-  project                  = var.project_id
-  public_access_prevention = "enforced"
+  count                       = var.init_custom_sql_script != "" ? 1 : 0
+  name                        = "sql-script-${random_id.this[0].hex}"
+  location                    = "europe-west3"
+  force_destroy               = true
+  project                     = var.project_id
+  public_access_prevention    = "enforced"
+  uniform_bucket_level_access = true
+  versioning {
+    enabled = true
+  }
+
+  logging {
+    log_bucket        = google_storage_bucket.logging_bucket.name
+    log_object_prefix = "access_logs/"
+  }
 }
 
 resource "google_storage_bucket_object" "sql_script" {