Table: alicloud_security_center_version - Query Alibaba Cloud Security Center Versions using SQL

Alibaba Cloud Security Center is a flagship security product that integrates both Server Guard and Threat Detection Service. It is a unified security management system that recognizes, analyzes, and alerts of security threats in real-time. Alibaba Cloud Security Center provides an array of security features to protect your environment and provides security insights for better visibility.

Table Usage Guide

The alicloud_security_center_version table provides insights into Security Center Versions within Alibaba Cloud Security Center. As a security engineer, explore version-specific details through this table, including the version code, name, and associated metadata. Utilize it to understand the different versions available in Alibaba Cloud Security Center and the services provided by each version.

Examples

Basic info

Explore which versions of the Alicloud Security Center are running as trial versions, are over balance, and identify the regions they are operating in. This can assist in managing resources and optimizing security measures.

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version;

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version;

Ensure that Security Center is Advanced or Enterprise edition

Discover the segments that are utilizing either the Advanced or Enterprise editions of the Security Center. This helps in understanding the deployment and usage of these premium editions across different regions, and whether they are trial versions or exceeding their balance.

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version
where
  version in ('2', '3', '5');

select
  version,
  is_trial_version,
  is_over_balance,
  region
from
  alicloud_security_center_version
where
  version in ('2', '3', '5');

Control examples

CIS v1.0.0 > 8 Security Center > 8.1 Ensure that Security Center is Advanced or Enterprise Edition

Schema for alicloud_security_center_version

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The Alicloud Account ID in which the resource is located.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
app_white_list	bigint		Indicates whether the application whitelist is enabled.
app_white_list_auth_count	bigint		The quota on the servers to which you can apply your application whitelist.
asset_level	bigint		The purchased quota for Security Center.
instance_id	text		The ID of the purchased Security Center instance.
is_over_balance	boolean		Indicates whether the number of existing servers exceeds your quota.
is_trial_version	boolean		Indicates whether Security Center is the free trial edition.
last_trail_end_time	timestamp with time zone		The time when the last free trial ends.
region	text		The Alicloud region in which the resource is located.
release_time	timestamp with time zone		The time when the Security Center instance expired.
sas_log	bigint		Indicates whether log analysis is purchased.
sas_screen	bigint		Indicates whether the security dashboard is purchased.
sls_capacity	bigint		The purchased capacity of log storage.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
title	text		Title of the resource.
user_defined_alarms	bigint		Indicates whether the custom alert feature is enabled.
version	text		The purchased edition of Security Center.
web_lock	bigint		Indicates whether web tamper proofing is enabled.
web_lock_auth_count	bigint		The quota on the servers that web tamper proofing protects.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- alicloud

You can pass the configuration to the command with the --config argument:

steampipe_export_alicloud --config '<your_config>' alicloud_security_center_version