steampipe plugin install oci

Table: oci_identity_group - Query OCI Identity Service Groups using SQL

Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) service lets you control who has access to your cloud resources. You can control what type of access a group of users have and to which specific resources. This is fundamental to the security and compliance of your resources in OCI.

Table Usage Guide

The oci_identity_group table provides insights into the groups within OCI Identity and Access Management (IAM). As a security analyst, you can explore group-specific details through this table, including the users that belong to a group, the policies attached to a group, and other associated metadata. Use it to discover information about groups, such as those with broad permissions, the relationships between users and groups, and to verify policy attachments.

Examples

Basic info

Explore which identity groups have been created in your OCI environment, along with their lifecycle states, to understand their current status and when they were established. This could be useful for auditing purposes or for maintaining an overview of your security settings.

select
name,
id,
description,
lifecycle_state,
time_created
from
oci_identity_group;
select
name,
id,
description,
lifecycle_state,
time_created
from
oci_identity_group;

List of Identity Groups which are not in Active state

Discover the segments that consist of identity groups not currently in an active state. This is beneficial in identifying and managing inactive groups within your Oracle Cloud Infrastructure.

select
name,
id,
lifecycle_state
from
oci_identity_group
where
lifecycle_state <> 'ACTIVE';
select
name,
id,
lifecycle_state
from
oci_identity_group
where
lifecycle_state <> 'ACTIVE';

List of Identity Groups without application tag key

Determine the areas in which identity groups lack an application tag key. This is useful for identifying potential gaps in your tagging strategy, helping to ensure all groups are properly categorized and managed.

select
name,
id
from
oci_identity_group
where
not tags :: JSONB ? 'application';
select
name,
id
from
oci_identity_group
where
json_extract(tags, '$.application') is null;

Schema for oci_identity_group

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form.
defined_tagsjsonbDefined tags for resource. Defined tags are set up in your tenancy by an administrator. Only users granted permission to work with the defined tags can apply them to resources.
descriptiontextThe OCID of the group.
freeform_tagsjsonbFree-form tags for resource. This tags can be applied by any user with permissions on the resource.
idtext=The OCID of the group.
inactive_statusbooleanThe detailed status of INACTIVE lifecycleState.
lifecycle_statetext=The group's current state.
nametext=The name assign to the group during creation.
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
tagsjsonbA map of tags for the resource.
tenant_idtext=, !=, ~~, ~~*, !~~, !~~*The OCID of the Tenant in which the resource is located.
tenant_nametextThe name of the Tenant in which the resource is located.
time_createdtimestamp with time zoneDate and time the group was created.
titletextTitle of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- oci

You can pass the configuration to the command with the --config argument:

steampipe_export_oci --config '<your_config>' oci_identity_group