Oracle Cloud Infrastructure

v0.5.0 published on Monday, Sep 12, 2022 by Pulumi

getAuditPolicies

This data source provides the list of Audit Policies in Oracle Cloud Infrastructure Data Safe service.

Retrieves a list of all audited targets with their corresponding provisioned audit policies, and their provisioning conditions.

The ListAuditPolicies operation returns only the audit policies in the specified compartmentId. The list does not include any subcompartments of the compartmentId passed.

The parameter accessLevel specifies whether to return only those compartments for which the requestor has INSPECT permissions on at least one resource directly or indirectly (ACCESSIBLE) (the resource can be in a subcompartment) or to return Not Authorized if Principal doesn’t have access to even one of the child compartments. This is valid only when compartmentIdInSubtree is set to true.

The parameter compartmentIdInSubtree applies when you perform ListAuditPolicies on the compartmentId passed and when it is set to true, the entire hierarchy of compartments can be returned. To get a full list of all compartments and subcompartments in the tenancy (root compartment), set the parameter compartmentIdInSubtree to true and accessLevel to ACCESSIBLE.

Example Usage

using System.Collections.Generic;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testAuditPolicies = Oci.DataSafe.GetAuditPolicies.Invoke(new()
    {
        CompartmentId = @var.Compartment_id,
        AccessLevel = @var.Audit_policy_access_level,
        AuditPolicyId = oci_data_safe_audit_policy.Test_audit_policy.Id,
        CompartmentIdInSubtree = @var.Audit_policy_compartment_id_in_subtree,
        DisplayName = @var.Audit_policy_display_name,
        State = @var.Audit_policy_state,
        TargetId = oci_cloud_guard_target.Test_target.Id,
    });

});
package main

import (
	"github.com/pulumi/pulumi-oci/sdk/go/oci/DataSafe"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := DataSafe.GetAuditPolicies(ctx, &datasafe.GetAuditPoliciesArgs{
			CompartmentId:          _var.Compartment_id,
			AccessLevel:            pulumi.StringRef(_var.Audit_policy_access_level),
			AuditPolicyId:          pulumi.StringRef(oci_data_safe_audit_policy.Test_audit_policy.Id),
			CompartmentIdInSubtree: pulumi.BoolRef(_var.Audit_policy_compartment_id_in_subtree),
			DisplayName:            pulumi.StringRef(_var.Audit_policy_display_name),
			State:                  pulumi.StringRef(_var.Audit_policy_state),
			TargetId:               pulumi.StringRef(oci_cloud_guard_target.Test_target.Id),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.DataSafe.DataSafeFunctions;
import com.pulumi.oci.DataSafe.inputs.GetAuditPoliciesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testAuditPolicies = DataSafeFunctions.getAuditPolicies(GetAuditPoliciesArgs.builder()
            .compartmentId(var_.compartment_id())
            .accessLevel(var_.audit_policy_access_level())
            .auditPolicyId(oci_data_safe_audit_policy.test_audit_policy().id())
            .compartmentIdInSubtree(var_.audit_policy_compartment_id_in_subtree())
            .displayName(var_.audit_policy_display_name())
            .state(var_.audit_policy_state())
            .targetId(oci_cloud_guard_target.test_target().id())
            .build());

    }
}
import pulumi
import pulumi_oci as oci

test_audit_policies = oci.DataSafe.get_audit_policies(compartment_id=var["compartment_id"],
    access_level=var["audit_policy_access_level"],
    audit_policy_id=oci_data_safe_audit_policy["test_audit_policy"]["id"],
    compartment_id_in_subtree=var["audit_policy_compartment_id_in_subtree"],
    display_name=var["audit_policy_display_name"],
    state=var["audit_policy_state"],
    target_id=oci_cloud_guard_target["test_target"]["id"])
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testAuditPolicies = oci.DataSafe.getAuditPolicies({
    compartmentId: _var.compartment_id,
    accessLevel: _var.audit_policy_access_level,
    auditPolicyId: oci_data_safe_audit_policy.test_audit_policy.id,
    compartmentIdInSubtree: _var.audit_policy_compartment_id_in_subtree,
    displayName: _var.audit_policy_display_name,
    state: _var.audit_policy_state,
    targetId: oci_cloud_guard_target.test_target.id,
});
variables:
  testAuditPolicies:
    Fn::Invoke:
      Function: oci:DataSafe:getAuditPolicies
      Arguments:
        compartmentId: ${var.compartment_id}
        accessLevel: ${var.audit_policy_access_level}
        auditPolicyId: ${oci_data_safe_audit_policy.test_audit_policy.id}
        compartmentIdInSubtree: ${var.audit_policy_compartment_id_in_subtree}
        displayName: ${var.audit_policy_display_name}
        state: ${var.audit_policy_state}
        targetId: ${oci_cloud_guard_target.test_target.id}

Using getAuditPolicies

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getAuditPolicies(args: GetAuditPoliciesArgs, opts?: InvokeOptions): Promise<GetAuditPoliciesResult>
function getAuditPoliciesOutput(args: GetAuditPoliciesOutputArgs, opts?: InvokeOptions): Output<GetAuditPoliciesResult>
def get_audit_policies(access_level: Optional[str] = None,
                       audit_policy_id: Optional[str] = None,
                       compartment_id: Optional[str] = None,
                       compartment_id_in_subtree: Optional[bool] = None,
                       display_name: Optional[str] = None,
                       filters: Optional[Sequence[_datasafe.GetAuditPoliciesFilter]] = None,
                       state: Optional[str] = None,
                       target_id: Optional[str] = None,
                       opts: Optional[InvokeOptions] = None) -> GetAuditPoliciesResult
def get_audit_policies_output(access_level: Optional[pulumi.Input[str]] = None,
                       audit_policy_id: Optional[pulumi.Input[str]] = None,
                       compartment_id: Optional[pulumi.Input[str]] = None,
                       compartment_id_in_subtree: Optional[pulumi.Input[bool]] = None,
                       display_name: Optional[pulumi.Input[str]] = None,
                       filters: Optional[pulumi.Input[Sequence[pulumi.Input[_datasafe.GetAuditPoliciesFilterArgs]]]] = None,
                       state: Optional[pulumi.Input[str]] = None,
                       target_id: Optional[pulumi.Input[str]] = None,
                       opts: Optional[InvokeOptions] = None) -> Output[GetAuditPoliciesResult]
func GetAuditPolicies(ctx *Context, args *GetAuditPoliciesArgs, opts ...InvokeOption) (*GetAuditPoliciesResult, error)
func GetAuditPoliciesOutput(ctx *Context, args *GetAuditPoliciesOutputArgs, opts ...InvokeOption) GetAuditPoliciesResultOutput

> Note: This function is named GetAuditPolicies in the Go SDK.

public static class GetAuditPolicies 
{
    public static Task<GetAuditPoliciesResult> InvokeAsync(GetAuditPoliciesArgs args, InvokeOptions? opts = null)
    public static Output<GetAuditPoliciesResult> Invoke(GetAuditPoliciesInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetAuditPoliciesResult> getAuditPolicies(GetAuditPoliciesArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
  function: oci:DataSafe/getAuditPolicies:getAuditPolicies
  arguments:
    # arguments dictionary

The following arguments are supported:

CompartmentId string

A filter to return only resources that match the specified compartment OCID.

AccessLevel string

Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.

AuditPolicyId string

An optional filter to return only resources that match the specified id.

CompartmentIdInSubtree bool

Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.

DisplayName string

A filter to return only resources that match the specified display name.

Filters List<GetAuditPoliciesFilter>
State string

The current state of the audit policy.

TargetId string

A filter to return only items related to a specific target OCID.

CompartmentId string

A filter to return only resources that match the specified compartment OCID.

AccessLevel string

Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.

AuditPolicyId string

An optional filter to return only resources that match the specified id.

CompartmentIdInSubtree bool

Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.

DisplayName string

A filter to return only resources that match the specified display name.

Filters []GetAuditPoliciesFilter
State string

The current state of the audit policy.

TargetId string

A filter to return only items related to a specific target OCID.

compartmentId String

A filter to return only resources that match the specified compartment OCID.

accessLevel String

Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.

auditPolicyId String

An optional filter to return only resources that match the specified id.

compartmentIdInSubtree Boolean

Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.

displayName String

A filter to return only resources that match the specified display name.

filters List<GetAuditPoliciesFilter>
state String

The current state of the audit policy.

targetId String

A filter to return only items related to a specific target OCID.

compartmentId string

A filter to return only resources that match the specified compartment OCID.

accessLevel string

Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.

auditPolicyId string

An optional filter to return only resources that match the specified id.

compartmentIdInSubtree boolean

Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.

displayName string

A filter to return only resources that match the specified display name.

filters GetAuditPoliciesFilter[]
state string

The current state of the audit policy.

targetId string

A filter to return only items related to a specific target OCID.

compartment_id str

A filter to return only resources that match the specified compartment OCID.

access_level str

Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.

audit_policy_id str

An optional filter to return only resources that match the specified id.

compartment_id_in_subtree bool

Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.

display_name str

A filter to return only resources that match the specified display name.

filters GetAuditPoliciesFilter]
state str

The current state of the audit policy.

target_id str

A filter to return only items related to a specific target OCID.

compartmentId String

A filter to return only resources that match the specified compartment OCID.

accessLevel String

Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.

auditPolicyId String

An optional filter to return only resources that match the specified id.

compartmentIdInSubtree Boolean

Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.

displayName String

A filter to return only resources that match the specified display name.

filters List<Property Map>
state String

The current state of the audit policy.

targetId String

A filter to return only items related to a specific target OCID.

getAuditPolicies Result

The following output properties are available:

AuditPolicyCollections List<GetAuditPoliciesAuditPolicyCollection>

The list of audit_policy_collection.

CompartmentId string

The OCID of the compartment containing the audit policy.

Id string

The provider-assigned unique ID for this managed resource.

AccessLevel string
AuditPolicyId string
CompartmentIdInSubtree bool
DisplayName string

The display name of the audit policy.

Filters List<GetAuditPoliciesFilter>
State string

The current state of the audit policy.

TargetId string

The OCID of the target for which the audit policy is created.

AuditPolicyCollections []GetAuditPoliciesAuditPolicyCollection

The list of audit_policy_collection.

CompartmentId string

The OCID of the compartment containing the audit policy.

Id string

The provider-assigned unique ID for this managed resource.

AccessLevel string
AuditPolicyId string
CompartmentIdInSubtree bool
DisplayName string

The display name of the audit policy.

Filters []GetAuditPoliciesFilter
State string

The current state of the audit policy.

TargetId string

The OCID of the target for which the audit policy is created.

auditPolicyCollections List<GetAuditPoliciesAuditPolicyCollection>

The list of audit_policy_collection.

compartmentId String

The OCID of the compartment containing the audit policy.

id String

The provider-assigned unique ID for this managed resource.

accessLevel String
auditPolicyId String
compartmentIdInSubtree Boolean
displayName String

The display name of the audit policy.

filters List<GetAuditPoliciesFilter>
state String

The current state of the audit policy.

targetId String

The OCID of the target for which the audit policy is created.

auditPolicyCollections GetAuditPoliciesAuditPolicyCollection[]

The list of audit_policy_collection.

compartmentId string

The OCID of the compartment containing the audit policy.

id string

The provider-assigned unique ID for this managed resource.

accessLevel string
auditPolicyId string
compartmentIdInSubtree boolean
displayName string

The display name of the audit policy.

filters GetAuditPoliciesFilter[]
state string

The current state of the audit policy.

targetId string

The OCID of the target for which the audit policy is created.

audit_policy_collections GetAuditPoliciesAuditPolicyCollection]

The list of audit_policy_collection.

compartment_id str

The OCID of the compartment containing the audit policy.

id str

The provider-assigned unique ID for this managed resource.

access_level str
audit_policy_id str
compartment_id_in_subtree bool
display_name str

The display name of the audit policy.

filters GetAuditPoliciesFilter]
state str

The current state of the audit policy.

target_id str

The OCID of the target for which the audit policy is created.

auditPolicyCollections List<Property Map>

The list of audit_policy_collection.

compartmentId String

The OCID of the compartment containing the audit policy.

id String

The provider-assigned unique ID for this managed resource.

accessLevel String
auditPolicyId String
compartmentIdInSubtree Boolean
displayName String

The display name of the audit policy.

filters List<Property Map>
state String

The current state of the audit policy.

targetId String

The OCID of the target for which the audit policy is created.

Supporting Types

GetAuditPoliciesAuditPolicyCollection

GetAuditPoliciesAuditPolicyCollectionItem

AuditConditions List<GetAuditPoliciesAuditPolicyCollectionItemAuditCondition>

Lists the audit policy provisioning conditions for the target database.

AuditPolicyId string

An optional filter to return only resources that match the specified id.

AuditSpecifications List<GetAuditPoliciesAuditPolicyCollectionItemAuditSpecification>

Represents all available audit policy specifications relevant for the target database. For more details on available audit polcies, refer to documentation.

CompartmentId string

A filter to return only resources that match the specified compartment OCID.

DefinedTags Dictionary<string, object>

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example: {"Operations.CostCenter": "42"}

Description string

Description of the audit policy.

DisplayName string

A filter to return only resources that match the specified display name.

FreeformTags Dictionary<string, object>

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example: {"Department": "Finance"}

Id string

The OCID of the audit policy.

IsDataSafeServiceAccountExcluded bool

Option provided to users at the target to indicate whether the Data Safe service account has to be excluded while provisioning the audit policies.

LifecycleDetails string

Details about the current state of the audit policy in Data Safe.

ProvisionTrigger int
RetrieveFromTargetTrigger int
State string

The current state of the audit policy.

SystemTags Dictionary<string, object>

System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"orcl-cloud.free-tier-retained": "true"}

TargetId string

A filter to return only items related to a specific target OCID.

TimeCreated string

The time the the audit policy was created, in the format defined by RFC3339.

TimeLastProvisioned string

Indicates the last provisioning time of audit policies on the target, in the format defined by RFC3339.

TimeLastRetrieved string

The time when the audit policies was last retrieved from this target, in the format defined by RFC3339.

TimeUpdated string

The last date and time the audit policy was updated, in the format defined by RFC3339.

AuditConditions []GetAuditPoliciesAuditPolicyCollectionItemAuditCondition

Lists the audit policy provisioning conditions for the target database.

AuditPolicyId string

An optional filter to return only resources that match the specified id.

AuditSpecifications []GetAuditPoliciesAuditPolicyCollectionItemAuditSpecification

Represents all available audit policy specifications relevant for the target database. For more details on available audit polcies, refer to documentation.

CompartmentId string

A filter to return only resources that match the specified compartment OCID.

DefinedTags map[string]interface{}

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example: {"Operations.CostCenter": "42"}

Description string

Description of the audit policy.

DisplayName string

A filter to return only resources that match the specified display name.

FreeformTags map[string]interface{}

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example: {"Department": "Finance"}

Id string

The OCID of the audit policy.

IsDataSafeServiceAccountExcluded bool

Option provided to users at the target to indicate whether the Data Safe service account has to be excluded while provisioning the audit policies.

LifecycleDetails string

Details about the current state of the audit policy in Data Safe.

ProvisionTrigger int
RetrieveFromTargetTrigger int
State string

The current state of the audit policy.

SystemTags map[string]interface{}

System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"orcl-cloud.free-tier-retained": "true"}

TargetId string

A filter to return only items related to a specific target OCID.

TimeCreated string

The time the the audit policy was created, in the format defined by RFC3339.

TimeLastProvisioned string

Indicates the last provisioning time of audit policies on the target, in the format defined by RFC3339.

TimeLastRetrieved string

The time when the audit policies was last retrieved from this target, in the format defined by RFC3339.

TimeUpdated string

The last date and time the audit policy was updated, in the format defined by RFC3339.

auditConditions List<GetAuditPoliciesAuditPolicyCollectionItemAuditCondition>

Lists the audit policy provisioning conditions for the target database.

auditPolicyId String

An optional filter to return only resources that match the specified id.

auditSpecifications List<GetAuditPoliciesAuditPolicyCollectionItemAuditSpecification>

Represents all available audit policy specifications relevant for the target database. For more details on available audit polcies, refer to documentation.

compartmentId String

A filter to return only resources that match the specified compartment OCID.

definedTags Map<String,Object>

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example: {"Operations.CostCenter": "42"}

description String

Description of the audit policy.

displayName String

A filter to return only resources that match the specified display name.

freeformTags Map<String,Object>

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example: {"Department": "Finance"}

id String

The OCID of the audit policy.

isDataSafeServiceAccountExcluded Boolean

Option provided to users at the target to indicate whether the Data Safe service account has to be excluded while provisioning the audit policies.

lifecycleDetails String

Details about the current state of the audit policy in Data Safe.

provisionTrigger Integer
retrieveFromTargetTrigger Integer
state String

The current state of the audit policy.

systemTags Map<String,Object>

System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"orcl-cloud.free-tier-retained": "true"}

targetId String

A filter to return only items related to a specific target OCID.

timeCreated String

The time the the audit policy was created, in the format defined by RFC3339.

timeLastProvisioned String

Indicates the last provisioning time of audit policies on the target, in the format defined by RFC3339.

timeLastRetrieved String

The time when the audit policies was last retrieved from this target, in the format defined by RFC3339.

timeUpdated String

The last date and time the audit policy was updated, in the format defined by RFC3339.

auditConditions GetAuditPoliciesAuditPolicyCollectionItemAuditCondition[]

Lists the audit policy provisioning conditions for the target database.

auditPolicyId string

An optional filter to return only resources that match the specified id.

auditSpecifications GetAuditPoliciesAuditPolicyCollectionItemAuditSpecification[]

Represents all available audit policy specifications relevant for the target database. For more details on available audit polcies, refer to documentation.

compartmentId string

A filter to return only resources that match the specified compartment OCID.

definedTags {[key: string]: any}

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example: {"Operations.CostCenter": "42"}

description string

Description of the audit policy.

displayName string

A filter to return only resources that match the specified display name.

freeformTags {[key: string]: any}

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example: {"Department": "Finance"}

id string

The OCID of the audit policy.

isDataSafeServiceAccountExcluded boolean

Option provided to users at the target to indicate whether the Data Safe service account has to be excluded while provisioning the audit policies.

lifecycleDetails string

Details about the current state of the audit policy in Data Safe.

provisionTrigger number
retrieveFromTargetTrigger number
state string

The current state of the audit policy.

systemTags {[key: string]: any}

System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"orcl-cloud.free-tier-retained": "true"}

targetId string

A filter to return only items related to a specific target OCID.

timeCreated string

The time the the audit policy was created, in the format defined by RFC3339.

timeLastProvisioned string

Indicates the last provisioning time of audit policies on the target, in the format defined by RFC3339.

timeLastRetrieved string

The time when the audit policies was last retrieved from this target, in the format defined by RFC3339.

timeUpdated string

The last date and time the audit policy was updated, in the format defined by RFC3339.

audit_conditions GetAuditPoliciesAuditPolicyCollectionItemAuditCondition]

Lists the audit policy provisioning conditions for the target database.

audit_policy_id str

An optional filter to return only resources that match the specified id.

audit_specifications GetAuditPoliciesAuditPolicyCollectionItemAuditSpecification]

Represents all available audit policy specifications relevant for the target database. For more details on available audit polcies, refer to documentation.

compartment_id str

A filter to return only resources that match the specified compartment OCID.

defined_tags Mapping[str, Any]

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example: {"Operations.CostCenter": "42"}

description str

Description of the audit policy.

display_name str

A filter to return only resources that match the specified display name.

freeform_tags Mapping[str, Any]

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example: {"Department": "Finance"}

id str

The OCID of the audit policy.

is_data_safe_service_account_excluded bool

Option provided to users at the target to indicate whether the Data Safe service account has to be excluded while provisioning the audit policies.

lifecycle_details str

Details about the current state of the audit policy in Data Safe.

provision_trigger int
retrieve_from_target_trigger int
state str

The current state of the audit policy.

system_tags Mapping[str, Any]

System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"orcl-cloud.free-tier-retained": "true"}

target_id str

A filter to return only items related to a specific target OCID.

time_created str

The time the the audit policy was created, in the format defined by RFC3339.

time_last_provisioned str

Indicates the last provisioning time of audit policies on the target, in the format defined by RFC3339.

time_last_retrieved str

The time when the audit policies was last retrieved from this target, in the format defined by RFC3339.

time_updated str

The last date and time the audit policy was updated, in the format defined by RFC3339.

auditConditions List<Property Map>

Lists the audit policy provisioning conditions for the target database.

auditPolicyId String

An optional filter to return only resources that match the specified id.

auditSpecifications List<Property Map>

Represents all available audit policy specifications relevant for the target database. For more details on available audit polcies, refer to documentation.

compartmentId String

A filter to return only resources that match the specified compartment OCID.

definedTags Map<Any>

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example: {"Operations.CostCenter": "42"}

description String

Description of the audit policy.

displayName String

A filter to return only resources that match the specified display name.

freeformTags Map<Any>

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example: {"Department": "Finance"}

id String

The OCID of the audit policy.

isDataSafeServiceAccountExcluded Boolean

Option provided to users at the target to indicate whether the Data Safe service account has to be excluded while provisioning the audit policies.

lifecycleDetails String

Details about the current state of the audit policy in Data Safe.

provisionTrigger Number
retrieveFromTargetTrigger Number
state String

The current state of the audit policy.

systemTags Map<Any>

System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"orcl-cloud.free-tier-retained": "true"}

targetId String

A filter to return only items related to a specific target OCID.

timeCreated String

The time the the audit policy was created, in the format defined by RFC3339.

timeLastProvisioned String

Indicates the last provisioning time of audit policies on the target, in the format defined by RFC3339.

timeLastRetrieved String

The time when the audit policies was last retrieved from this target, in the format defined by RFC3339.

timeUpdated String

The last date and time the audit policy was updated, in the format defined by RFC3339.

GetAuditPoliciesAuditPolicyCollectionItemAuditCondition

AuditPolicyName string

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

EnableConditions List<GetAuditPoliciesAuditPolicyCollectionItemAuditConditionEnableCondition>

Indicates the users/roles in the target database for which the audit policy is enforced, and the success/failure event condition to generate the audit event..

IsDataSafeServiceAccountAudited bool

Indicates whether the Data Safe user activity on the target database will be audited by the policy.

IsPrivUsersManagedByDataSafe bool

Indicates whether the privileged user list is managed by Data Safe.

AuditPolicyName string

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

EnableConditions []GetAuditPoliciesAuditPolicyCollectionItemAuditConditionEnableCondition

Indicates the users/roles in the target database for which the audit policy is enforced, and the success/failure event condition to generate the audit event..

IsDataSafeServiceAccountAudited bool

Indicates whether the Data Safe user activity on the target database will be audited by the policy.

IsPrivUsersManagedByDataSafe bool

Indicates whether the privileged user list is managed by Data Safe.

auditPolicyName String

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

enableConditions List<GetAuditPoliciesAuditPolicyCollectionItemAuditConditionEnableCondition>

Indicates the users/roles in the target database for which the audit policy is enforced, and the success/failure event condition to generate the audit event..

isDataSafeServiceAccountAudited Boolean

Indicates whether the Data Safe user activity on the target database will be audited by the policy.

isPrivUsersManagedByDataSafe Boolean

Indicates whether the privileged user list is managed by Data Safe.

auditPolicyName string

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

enableConditions GetAuditPoliciesAuditPolicyCollectionItemAuditConditionEnableCondition[]

Indicates the users/roles in the target database for which the audit policy is enforced, and the success/failure event condition to generate the audit event..

isDataSafeServiceAccountAudited boolean

Indicates whether the Data Safe user activity on the target database will be audited by the policy.

isPrivUsersManagedByDataSafe boolean

Indicates whether the privileged user list is managed by Data Safe.

audit_policy_name str

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

enable_conditions GetAuditPoliciesAuditPolicyCollectionItemAuditConditionEnableCondition]

Indicates the users/roles in the target database for which the audit policy is enforced, and the success/failure event condition to generate the audit event..

is_data_safe_service_account_audited bool

Indicates whether the Data Safe user activity on the target database will be audited by the policy.

is_priv_users_managed_by_data_safe bool

Indicates whether the privileged user list is managed by Data Safe.

auditPolicyName String

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

enableConditions List<Property Map>

Indicates the users/roles in the target database for which the audit policy is enforced, and the success/failure event condition to generate the audit event..

isDataSafeServiceAccountAudited Boolean

Indicates whether the Data Safe user activity on the target database will be audited by the policy.

isPrivUsersManagedByDataSafe Boolean

Indicates whether the privileged user list is managed by Data Safe.

GetAuditPoliciesAuditPolicyCollectionItemAuditConditionEnableCondition

EntityNames List<string>

List of users or roles that the policy must be enabled for.

EntitySelection string

The entity include or exclude selection.

EntityType string

The entity type that the policy must be enabled for.

OperationStatus string

The operation status that the policy must be enabled for.

EntityNames []string

List of users or roles that the policy must be enabled for.

EntitySelection string

The entity include or exclude selection.

EntityType string

The entity type that the policy must be enabled for.

OperationStatus string

The operation status that the policy must be enabled for.

entityNames List<String>

List of users or roles that the policy must be enabled for.

entitySelection String

The entity include or exclude selection.

entityType String

The entity type that the policy must be enabled for.

operationStatus String

The operation status that the policy must be enabled for.

entityNames string[]

List of users or roles that the policy must be enabled for.

entitySelection string

The entity include or exclude selection.

entityType string

The entity type that the policy must be enabled for.

operationStatus string

The operation status that the policy must be enabled for.

entity_names Sequence[str]

List of users or roles that the policy must be enabled for.

entity_selection str

The entity include or exclude selection.

entity_type str

The entity type that the policy must be enabled for.

operation_status str

The operation status that the policy must be enabled for.

entityNames List<String>

List of users or roles that the policy must be enabled for.

entitySelection String

The entity include or exclude selection.

entityType String

The entity type that the policy must be enabled for.

operationStatus String

The operation status that the policy must be enabled for.

GetAuditPoliciesAuditPolicyCollectionItemAuditSpecification

AuditPolicyCategory string

The category to which the audit policy belongs.

AuditPolicyName string

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

DatabasePolicyNames List<string>

Indicates the names of corresponding database policy ( or policies) in the target database.

EnableStatus string

Indicates whether the policy has been enabled, disabled or partially enabled in the target database. The status is PARTIALLY_ENABLED if any of the constituent database audit policies is not enabled.

EnabledEntities string

Indicates on whom the audit policy is enabled.

IsCreated bool

Indicates whether the policy is already created on the target database.

IsEnabledForAllUsers bool

Indicates whether the policy by default is enabled for all users with no flexibility to alter the enablement conditions.

IsSeededInDataSafe bool

Indicates whether the audit policy is one of the seeded policies provided by Oracle Data Safe.

IsSeededInTarget bool

Indicates whether the audit policy is one of the predefined policies provided by Oracle Database.

IsViewOnly bool

Indicates whether the audit policy is available for provisioning/ de-provisioning from Oracle Data Safe, or is only available for displaying the current provisioning status from the target.

PartiallyEnabledMsg string

Provides information about the policy that has been only partially enabled.

AuditPolicyCategory string

The category to which the audit policy belongs.

AuditPolicyName string

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

DatabasePolicyNames []string

Indicates the names of corresponding database policy ( or policies) in the target database.

EnableStatus string

Indicates whether the policy has been enabled, disabled or partially enabled in the target database. The status is PARTIALLY_ENABLED if any of the constituent database audit policies is not enabled.

EnabledEntities string

Indicates on whom the audit policy is enabled.

IsCreated bool

Indicates whether the policy is already created on the target database.

IsEnabledForAllUsers bool

Indicates whether the policy by default is enabled for all users with no flexibility to alter the enablement conditions.

IsSeededInDataSafe bool

Indicates whether the audit policy is one of the seeded policies provided by Oracle Data Safe.

IsSeededInTarget bool

Indicates whether the audit policy is one of the predefined policies provided by Oracle Database.

IsViewOnly bool

Indicates whether the audit policy is available for provisioning/ de-provisioning from Oracle Data Safe, or is only available for displaying the current provisioning status from the target.

PartiallyEnabledMsg string

Provides information about the policy that has been only partially enabled.

auditPolicyCategory String

The category to which the audit policy belongs.

auditPolicyName String

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

databasePolicyNames List<String>

Indicates the names of corresponding database policy ( or policies) in the target database.

enableStatus String

Indicates whether the policy has been enabled, disabled or partially enabled in the target database. The status is PARTIALLY_ENABLED if any of the constituent database audit policies is not enabled.

enabledEntities String

Indicates on whom the audit policy is enabled.

isCreated Boolean

Indicates whether the policy is already created on the target database.

isEnabledForAllUsers Boolean

Indicates whether the policy by default is enabled for all users with no flexibility to alter the enablement conditions.

isSeededInDataSafe Boolean

Indicates whether the audit policy is one of the seeded policies provided by Oracle Data Safe.

isSeededInTarget Boolean

Indicates whether the audit policy is one of the predefined policies provided by Oracle Database.

isViewOnly Boolean

Indicates whether the audit policy is available for provisioning/ de-provisioning from Oracle Data Safe, or is only available for displaying the current provisioning status from the target.

partiallyEnabledMsg String

Provides information about the policy that has been only partially enabled.

auditPolicyCategory string

The category to which the audit policy belongs.

auditPolicyName string

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

databasePolicyNames string[]

Indicates the names of corresponding database policy ( or policies) in the target database.

enableStatus string

Indicates whether the policy has been enabled, disabled or partially enabled in the target database. The status is PARTIALLY_ENABLED if any of the constituent database audit policies is not enabled.

enabledEntities string

Indicates on whom the audit policy is enabled.

isCreated boolean

Indicates whether the policy is already created on the target database.

isEnabledForAllUsers boolean

Indicates whether the policy by default is enabled for all users with no flexibility to alter the enablement conditions.

isSeededInDataSafe boolean

Indicates whether the audit policy is one of the seeded policies provided by Oracle Data Safe.

isSeededInTarget boolean

Indicates whether the audit policy is one of the predefined policies provided by Oracle Database.

isViewOnly boolean

Indicates whether the audit policy is available for provisioning/ de-provisioning from Oracle Data Safe, or is only available for displaying the current provisioning status from the target.

partiallyEnabledMsg string

Provides information about the policy that has been only partially enabled.

audit_policy_category str

The category to which the audit policy belongs.

audit_policy_name str

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

database_policy_names Sequence[str]

Indicates the names of corresponding database policy ( or policies) in the target database.

enable_status str

Indicates whether the policy has been enabled, disabled or partially enabled in the target database. The status is PARTIALLY_ENABLED if any of the constituent database audit policies is not enabled.

enabled_entities str

Indicates on whom the audit policy is enabled.

is_created bool

Indicates whether the policy is already created on the target database.

is_enabled_for_all_users bool

Indicates whether the policy by default is enabled for all users with no flexibility to alter the enablement conditions.

is_seeded_in_data_safe bool

Indicates whether the audit policy is one of the seeded policies provided by Oracle Data Safe.

is_seeded_in_target bool

Indicates whether the audit policy is one of the predefined policies provided by Oracle Database.

is_view_only bool

Indicates whether the audit policy is available for provisioning/ de-provisioning from Oracle Data Safe, or is only available for displaying the current provisioning status from the target.

partially_enabled_msg str

Provides information about the policy that has been only partially enabled.

auditPolicyCategory String

The category to which the audit policy belongs.

auditPolicyName String

Indicates the audit policy name. Refer to the documentation for seeded audit policy names. For custom policies, refer to the user-defined policy name created in the target database.

databasePolicyNames List<String>

Indicates the names of corresponding database policy ( or policies) in the target database.

enableStatus String

Indicates whether the policy has been enabled, disabled or partially enabled in the target database. The status is PARTIALLY_ENABLED if any of the constituent database audit policies is not enabled.

enabledEntities String

Indicates on whom the audit policy is enabled.

isCreated Boolean

Indicates whether the policy is already created on the target database.

isEnabledForAllUsers Boolean

Indicates whether the policy by default is enabled for all users with no flexibility to alter the enablement conditions.

isSeededInDataSafe Boolean

Indicates whether the audit policy is one of the seeded policies provided by Oracle Data Safe.

isSeededInTarget Boolean

Indicates whether the audit policy is one of the predefined policies provided by Oracle Database.

isViewOnly Boolean

Indicates whether the audit policy is available for provisioning/ de-provisioning from Oracle Data Safe, or is only available for displaying the current provisioning status from the target.

partiallyEnabledMsg String

Provides information about the policy that has been only partially enabled.

GetAuditPoliciesFilter

Name string
Values List<string>
Regex bool
Name string
Values []string
Regex bool
name String
values List<String>
regex Boolean
name string
values string[]
regex boolean
name str
values Sequence[str]
regex bool
name String
values List<String>
regex Boolean

Package Details

Repository
https://github.com/pulumi/pulumi-oci
License
Apache-2.0
Notes

This Pulumi package is based on the oci Terraform Provider.