Table: oci_dns_tsig_key - Query OCI DNS TSIG Keys using SQL
DNS Transaction Signature (TSIG) is a resource in Oracle Cloud Infrastructure (OCI) that provides enhanced security for DNS operations. TSIG keys are used to authenticate DNS messages and prevent unauthorized DNS operations. They are crucial for maintaining the integrity and security of DNS data within OCI.
Table Usage Guide
The oci_dns_tsig_key
table offers insights into DNS Transaction Signature (TSIG) Keys within OCI DNS. As a security analyst, you can explore key-specific details through this table, including algorithm types, secret keys, and associated metadata. Utilize it to uncover information about TSIG keys, such as those with specific algorithms, the lifecycle state of keys, and the time of their creation.
Examples
Basic info
Assess the elements within your Oracle Cloud Infrastructure by pinpointing specific locations where certain security keys were created and their current lifecycle state. This aids in understanding the status and age of your security measures.
select id, name, lifecycle_state, time_createdfrom oci_dns_tsig_key;
select id, name, lifecycle_state, time_createdfrom oci_dns_tsig_key;
List TSIG keys which are not active
Explore TSIG keys that are not currently active. This can be useful in identifying keys that may be expired or unused, aiding in the maintenance and security of your DNS system.
select name, id, lifecycle_statefrom oci_dns_tsig_keywhere lifecycle_state <> 'ACTIVE';
select name, id, lifecycle_statefrom oci_dns_tsig_keywhere lifecycle_state <> 'ACTIVE';
Schema for oci_dns_tsig_key
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
algorithm | text | TSIG key algorithms are encoded as domain names, but most consist of only one non-empty label, which is not required to be explicitly absolute. | |
compartment_id | text | = | The OCID of the compartment in Tenant in which the resource is located. |
defined_tags | jsonb | Defined tags for resource. Defined tags are set up in your tenancy by an administrator. Only users granted permission to work with the defined tags can apply them to resources. | |
freeform_tags | jsonb | Free-form tags for resource. This tags can be applied by any user with permissions on the resource. | |
id | text | = | The OCID of the resource. |
lifecycle_state | text | = | The current state of the resource. |
name | text | = | A globally unique domain name identifying the key for a given pair of hosts. |
secret | text | A base64 string encoding the binary shared secret. | |
self | text | The canonical absolute URL of the resource. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
tags | jsonb | A map of tags for the resource. | |
tenant_id | text | =, !=, ~~, ~~*, !~~, !~~* | The OCID of the Tenant in which the resource is located. |
tenant_name | text | The name of the Tenant in which the resource is located. | |
time_created | timestamp with time zone | The date and time the resource was created. | |
time_updated | timestamp with time zone | The date and time the resource was last updated. | |
title | text | Title of the resource. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- oci
You can pass the configuration to the command with the --config
argument:
steampipe_export_oci --config '<your_config>' oci_dns_tsig_key