Table: ibm_cis_domain - Query IBM Cloud Internet Services Domains using SQL
IBM Cloud Internet Services is a set of edge network services for applications hosted on IBM Cloud. It combines the power of IBM's global network with Cloudflare's edge computing solutions, providing a suite of robust network services including domains. These domains are part of the Cloud Internet Services offering and are used to manage and secure your applications.
Table Usage Guide
The ibm_cis_domain
table provides insights into domains within IBM Cloud Internet Services. As a Network Administrator, explore domain-specific details through this table, including domain name, status, and associated metadata. Utilize it to uncover information about domains, such as their current status, the time they were created, and the time they were last modified.
Examples
Basic info
Explore which domains are active and their respective security levels by assessing their status and minimum TLS version. This is particularly useful for maintaining security standards and ensuring all domains are operating as expected.
select name, id, status, minimum_tls_versionfrom ibm_cis_domain;
select name, id, status, minimum_tls_versionfrom ibm_cis_domain;
List pending domains
Identify domains that are currently in a pending status to monitor and manage their progress effectively.
select name, id, status, minimum_tls_versionfrom ibm_cis_domainwhere status = 'pending';
select name, id, status, minimum_tls_versionfrom ibm_cis_domainwhere status = 'pending';
List domains where web_application_firewall not enabled
Identify domains where the web application firewall is not enabled. This is useful for enhancing security by pinpointing potential vulnerabilities in your network infrastructure.
select name, id, status, minimum_tls_versionfrom ibm_cis_domainwhere web_application_firewall = 'off';
select name, id, status, minimum_tls_versionfrom ibm_cis_domainwhere web_application_firewall = 'off';
Control examples
- CIS v1.0.0 > 6 Networking > 6.1 IBM Cloud Internet Services > 6.1.1 Enable TLS 1.2 at minimum for all inbound traffic on IBM Cloud Internet Services Proxy
- CIS v1.0.0 > 6 Networking > 6.1 IBM Cloud Internet Services > 6.1.2 Ensure Web application firewall is set to ON in IBM Cloud Internet Services (CIS)
- CIS v1.0.0 > 6 Networking > 6.1 IBM Cloud Internet Services > 6.1.3 Ensure DDoS protection is Active on IBM Cloud Internet Services
Schema for ibm_cis_domain
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
account_id | text | =, !=, ~~, ~~*, !~~, !~~* | The ID fof the account. |
akas | jsonb | Array of globally unique identifier strings (also known as) for the resource. | |
created_on | timestamp with time zone | The date and time that the zone was created. | |
dns_records | jsonb | DNS records for the domain. | |
global_load_balancer | jsonb | The global load balancer of the zone. | |
id | text | = | The zone id. |
minimum_tls_version | text | The tls version of the zone. | |
modified_on | timestamp with time zone | The date and time that the zone was updated. | |
name | text | The zone name. | |
name_servers | jsonb | The name servers of the zone. | |
original_dnshost | text | The original DNS host of the zone. | |
original_name_servers | jsonb | The original name servers of the zone. | |
original_registrar | text | The original registrar of the zone. | |
paused | boolean | Whether the zone is in paused state. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
status | text | The zone status. | |
title | text | Title of the resource. | |
web_application_firewall | text | The web application firewall state. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- ibm
You can pass the configuration to the command with the --config
argument:
steampipe_export_ibm --config '<your_config>' ibm_cis_domain