Table: alicloud_security_center_version - Query Alibaba Cloud Security Center Versions using SQL

Alibaba Cloud Security Center is a flagship security product that integrates both Server Guard and Threat Detection Service. It is a unified security management system that recognizes, analyzes, and alerts of security threats in real-time. Alibaba Cloud Security Center provides an array of security features to protect your environment and provides security insights for better visibility.

Table Usage Guide

The alicloud_security_center_version table provides insights into Security Center Versions within Alibaba Cloud Security Center. As a security engineer, explore version-specific details through this table, including the version code, name, and associated metadata. Utilize it to understand the different versions available in Alibaba Cloud Security Center and the services provided by each version.

Examples

Basic info

Explore which versions of the Alicloud Security Center are running as trial versions, are over balance, and identify the regions they are operating in. This can assist in managing resources and optimizing security measures.

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version;

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version;

Ensure that Security Center is Advanced or Enterprise edition

Discover the segments that are utilizing either the Advanced or Enterprise editions of the Security Center. This helps in understanding the deployment and usage of these premium editions across different regions, and whether they are trial versions or exceeding their balance.

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version
where
  version in ('2', '3', '5');

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version
where
  version in ('2', '3', '5');

Control examples

8.1 Ensure that Security Center is Advanced or Enterprise Edition

Schema for alicloud_security_center_version

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The Alicloud Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
app_white_list	bigint	Indicates whether the application whitelist is enabled.
app_white_list_auth_count	bigint	The quota on the servers to which you can apply your application whitelist.
asset_level	bigint	The purchased quota for Security Center.
instance_id	text	The ID of the purchased Security Center instance.
is_over_balance	boolean	Indicates whether the number of existing servers exceeds your quota.
is_trial_version	boolean	Indicates whether Security Center is the free trial edition.
last_trail_end_time	timestamp with time zone	The time when the last free trial ends.
region	text	The Alicloud region in which the resource is located.
release_time	timestamp with time zone	The time when the Security Center instance expired.
sas_log	bigint	Indicates whether log analysis is purchased.
sas_screen	bigint	Indicates whether the security dashboard is purchased.
sls_capacity	bigint	The purchased capacity of log storage.
title	text	Title of the resource.
user_defined_alarms	bigint	Indicates whether the custom alert feature is enabled.
version	text	The purchased edition of Security Center.
web_lock	bigint	Indicates whether web tamper proofing is enabled.
web_lock_auth_count	bigint	The quota on the servers that web tamper proofing protects.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- alicloud

You can pass the configuration to the command with the --config argument:

steampipe_export_alicloud --config '<your_config>' alicloud_security_center_version