steampipe plugin install ocisteampipe plugin install oci

Table: oci_cloud_guard_responder_recipe - Query OCI Cloud Guard Responder Recipes using SQL

Cloud Guard Responder Recipe is a component of Oracle Cloud Infrastructure's (OCI) Cloud Guard service, which provides a robust security and compliance platform. Responder Recipes are collections of managed lists and rules that define how Cloud Guard should respond to specific security findings. They play a crucial role in automating the remediation of detected security issues.

Table Usage Guide

The oci_cloud_guard_responder_recipe table provides insights into the Responder Recipes within OCI's Cloud Guard service. As a security analyst or a cloud administrator, explore detailed information about these recipes, including their associated rules, conditions, and actions. Utilize this table to streamline the management of your security responses, automate remediation processes, and enhance the overall security posture of your OCI environment.

Examples

Basic info

Explore which cloud guard responder recipes have been created and their current lifecycle states. This is useful for understanding the security posture and state of your Oracle Cloud Infrastructure.

select
  name,
  id,
  time_created,
  lifecycle_state as state
from
  oci_cloud_guard_responder_recipe;

select
  name,
  id,
  time_created,
  lifecycle_state as state
from
  oci_cloud_guard_responder_recipe;

List responder recipes which are not active

Discover the segments that consist of responder recipes which are not currently active. This can be useful in identifying potential security risks or areas in need of maintenance within your cloud infrastructure.

select
  name,
  id,
  time_created,
  lifecycle_state as state
from
  oci_cloud_guard_responder_recipe
where
  lifecycle_state <> 'ACTIVE';

select
  name,
  id,
  time_created,
  lifecycle_state as state
from
  oci_cloud_guard_responder_recipe
where
  lifecycle_state <> 'ACTIVE';

Schema for oci_cloud_guard_responder_recipe

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
compartment_id	text	=	The OCID of the compartment in Tenant in which the resource is located.
defined_tags	jsonb		Defined tags for resource. Defined tags are set up in your tenancy by an administrator. Only users granted permission to work with the defined tags can apply them to resources.
description	text		Responder recipe description.
effective_responder_rules	jsonb		List of responder rules for the responder type for recipe.
freeform_tags	jsonb		Free-form tags for resource. This tags can be applied by any user with permissions on the resource.
id	text	=	OCID for responder recipe.
lifecycle_details	text		A message describing the current state in more detail.
lifecycle_state	text	=	The current state of the responder recipe.
name	text	=	Display name of responder recipe.
owner	text		Owner of responder recipe.
responder_rules	jsonb		List of responder rules for the responder type for recipe.
source_responder_recipe_id	text		Recipe OCID of the source recipe to be cloned.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
system_tags	jsonb		System tags for resource. System tags can be viewed by users, but can only be created by the system.
tags	jsonb		A map of tags for the resource.
tenant_id	text	=, !=, ~~, ~~, !~~, !~~	The OCID of the Tenant in which the resource is located.
tenant_name	text		The name of the Tenant in which the resource is located.
time_created	timestamp with time zone		The date and time the responder recipe was created.
time_updated	timestamp with time zone		The date and time the responder recipe was updated.
title	text		Title of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- oci

You can pass the configuration to the command with the --config argument:

steampipe_export_oci --config '<your_config>' oci_cloud_guard_responder_recipe