Table: oci_cloud_guard_configuration - Query OCI Cloud Guard Configurations using SQL
Oracle Cloud Infrastructure's Cloud Guard is a security service that identifies security weaknesses and activities amongst your resources and assists you in rapidly acting upon them. Cloud Guard uses detectors to identify security issues and a responder to act on these issues. It monitors your entire tenancy and ensures that your resources stay secure.
Table Usage Guide
The oci_cloud_guard_configuration
table provides insights into Cloud Guard Configurations within Oracle Cloud Infrastructure's Cloud Guard. As a security administrator, explore configuration-specific details through this table, including status, compartment id, and associated metadata. Utilize it to uncover information about configurations, such as their current status, the compartment they belong to, and the detailed settings.
Examples
Basic info
Analyze the settings to understand the status and management of resources across different reporting regions in your OCI Cloud Guard configuration. This can help determine areas where resources are self-managed and where intervention may be needed.
select reporting_region, status, self_manage_resourcesfrom oci_cloud_guard_configuration;
select reporting_region, status, self_manage_resourcesfrom oci_cloud_guard_configuration;
Control examples
- CIS v1.1.0 > 3 Logging and Monitoring > 3.15 Ensure Cloud Guard is enabled in the root compartment of the tenancy
- CIS v1.2.0 > 3 Logging and Monitoring > 3.15 Ensure Cloud Guard is enabled in the root compartment of the tenancy
- CIS v2.0.0 > 4 Logging and Monitoring > 4.14 Ensure Cloud Guard is enabled in the root compartment of the tenancy
Schema for oci_cloud_guard_configuration
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
reporting_region | text | The reporting region value. | |
self_manage_resources | boolean | Identifies if Oracle managed resources were created by customers. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
status | text | Status of Cloud Guard Tenant. | |
tenant_id | text | =, !=, ~~, ~~*, !~~, !~~* | The OCID of the Tenant in which the resource is located. |
tenant_name | text | The name of the Tenant in which the resource is located. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- oci
You can pass the configuration to the command with the --config
argument:
steampipe_export_oci --config '<your_config>' oci_cloud_guard_configuration