Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Oracle Cloud Infrastructure
  4. API Docs
  5. DataSafe
  6. getCryptoAssessmentCertificates
Viewing docs for Oracle Cloud Infrastructure v5.1.0
published on Friday, Sep 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-oci

oci.DataSafe.getCryptoAssessmentCertificates

oci logo oci logo
Viewing docs for Oracle Cloud Infrastructure v5.1.0
published on Friday, Sep 25, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-oci

    This data source provides the list of Crypto Assessment Certificates in Oracle Cloud Infrastructure Data Safe service.

    Lists certificates discovered across targets in a compartment, including target, wallet location, issuer, subject, validity window, expiry bucket, public key type, and status so expiring or weak certificates can be identified and prioritized.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testCryptoAssessmentCertificates = oci.datasafe.getCryptoAssessmentCertificates({
    compartmentId: compartmentId,
    accessLevel: cryptoAssessmentCertificateAccessLevel,
    assessmentId: testAssessment.id,
    assessmentType: cryptoAssessmentCertificateAssessmentType,
    certificateTypes: cryptoAssessmentCertificateCertificateType,
    compartmentIdInSubtree: cryptoAssessmentCertificateCompartmentIdInSubtree === "true",
    daysToExpiry: Number(cryptoAssessmentCertificateDaysToExpiry),
    expiryBucket: cryptoAssessmentCertificateExpiryBucket,
    publicKeyTypes: cryptoAssessmentCertificatePublicKeyType,
    signatureAlgorithms: cryptoAssessmentCertificateSignatureAlgorithm,
    statuses: cryptoAssessmentCertificateStatus,
    targetId: testTarget.id,
    targetIds: cryptoAssessmentCertificateTargetIds,
});

    import pulumi
import pulumi_oci as oci

test_crypto_assessment_certificates = oci.datasafe.get_crypto_assessment_certificates(compartment_id=compartment_id,
    access_level=crypto_assessment_certificate_access_level,
    assessment_id=test_assessment["id"],
    assessment_type=crypto_assessment_certificate_assessment_type,
    certificate_types=crypto_assessment_certificate_certificate_type,
    compartment_id_in_subtree=crypto_assessment_certificate_compartment_id_in_subtree == "true",
    days_to_expiry=int(crypto_assessment_certificate_days_to_expiry),
    expiry_bucket=crypto_assessment_certificate_expiry_bucket,
    public_key_types=crypto_assessment_certificate_public_key_type,
    signature_algorithms=crypto_assessment_certificate_signature_algorithm,
    statuses=crypto_assessment_certificate_status,
    target_id=test_target["id"],
    target_ids=crypto_assessment_certificate_target_ids)

    package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v5/go/oci/datasafe"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := datasafe.GetCryptoAssessmentCertificates(ctx, &datasafe.GetCryptoAssessmentCertificatesArgs{
			CompartmentId:          compartmentId,
			AccessLevel:            pulumi.StringRef(cryptoAssessmentCertificateAccessLevel),
			AssessmentId:           pulumi.StringRef(testAssessment.Id),
			AssessmentType:         pulumi.StringRef(cryptoAssessmentCertificateAssessmentType),
			CertificateTypes:       pulumi.ToArray(cryptoAssessmentCertificateCertificateType),
			CompartmentIdInSubtree: pulumi.BoolRef(cryptoAssessmentCertificateCompartmentIdInSubtree),
			DaysToExpiry:           pulumi.IntRef(cryptoAssessmentCertificateDaysToExpiry),
			ExpiryBucket:           pulumi.StringRef(cryptoAssessmentCertificateExpiryBucket),
			PublicKeyTypes:         pulumi.ToArray(cryptoAssessmentCertificatePublicKeyType),
			SignatureAlgorithms:    pulumi.ToArray(cryptoAssessmentCertificateSignatureAlgorithm),
			Statuses:               pulumi.ToArray(cryptoAssessmentCertificateStatus),
			TargetId:               pulumi.StringRef(testTarget.Id),
			TargetIds:              pulumi.ToArray(cryptoAssessmentCertificateTargetIds),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testCryptoAssessmentCertificates = Oci.DataSafe.GetCryptoAssessmentCertificates.Invoke(new()
    {
        CompartmentId = compartmentId,
        AccessLevel = cryptoAssessmentCertificateAccessLevel,
        AssessmentId = testAssessment.Id,
        AssessmentType = cryptoAssessmentCertificateAssessmentType,
        CertificateTypes = cryptoAssessmentCertificateCertificateType,
        CompartmentIdInSubtree = cryptoAssessmentCertificateCompartmentIdInSubtree,
        DaysToExpiry = cryptoAssessmentCertificateDaysToExpiry,
        ExpiryBucket = cryptoAssessmentCertificateExpiryBucket,
        PublicKeyTypes = cryptoAssessmentCertificatePublicKeyType,
        SignatureAlgorithms = cryptoAssessmentCertificateSignatureAlgorithm,
        Statuses = cryptoAssessmentCertificateStatus,
        TargetId = testTarget.Id,
        TargetIds = cryptoAssessmentCertificateTargetIds,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.DataSafe.DataSafeFunctions;
import com.pulumi.oci.DataSafe.inputs.GetCryptoAssessmentCertificatesArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testCryptoAssessmentCertificates = DataSafeFunctions.getCryptoAssessmentCertificates(GetCryptoAssessmentCertificatesArgs.builder()
            .compartmentId(compartmentId)
            .accessLevel(cryptoAssessmentCertificateAccessLevel)
            .assessmentId(testAssessment.id())
            .assessmentType(cryptoAssessmentCertificateAssessmentType)
            .certificateTypes(cryptoAssessmentCertificateCertificateType)
            .compartmentIdInSubtree(cryptoAssessmentCertificateCompartmentIdInSubtree)
            .daysToExpiry(cryptoAssessmentCertificateDaysToExpiry)
            .expiryBucket(cryptoAssessmentCertificateExpiryBucket)
            .publicKeyTypes(cryptoAssessmentCertificatePublicKeyType)
            .signatureAlgorithms(cryptoAssessmentCertificateSignatureAlgorithm)
            .statuses(cryptoAssessmentCertificateStatus)
            .targetId(testTarget.id())
            .targetIds(cryptoAssessmentCertificateTargetIds)
            .build());

    }
}

    variables:
  testCryptoAssessmentCertificates:
    fn::invoke:
      function: oci:DataSafe:getCryptoAssessmentCertificates
      arguments:
        compartmentId: ${compartmentId}
        accessLevel: ${cryptoAssessmentCertificateAccessLevel}
        assessmentId: ${testAssessment.id}
        assessmentType: ${cryptoAssessmentCertificateAssessmentType}
        certificateTypes: ${cryptoAssessmentCertificateCertificateType}
        compartmentIdInSubtree: ${cryptoAssessmentCertificateCompartmentIdInSubtree}
        daysToExpiry: ${cryptoAssessmentCertificateDaysToExpiry}
        expiryBucket: ${cryptoAssessmentCertificateExpiryBucket}
        publicKeyTypes: ${cryptoAssessmentCertificatePublicKeyType}
        signatureAlgorithms: ${cryptoAssessmentCertificateSignatureAlgorithm}
        statuses: ${cryptoAssessmentCertificateStatus}
        targetId: ${testTarget.id}
        targetIds: ${cryptoAssessmentCertificateTargetIds}

    pulumi {
  required_providers {
    oci = {
      source = "pulumi/oci"
    }
  }
}

data "oci_datasafe_getcryptoassessmentcertificates" "testCryptoAssessmentCertificates" {
  compartment_id            = compartmentId
  access_level              = cryptoAssessmentCertificateAccessLevel
  assessment_id             = testAssessment.id
  assessment_type           = cryptoAssessmentCertificateAssessmentType
  certificate_types         = cryptoAssessmentCertificateCertificateType
  compartment_id_in_subtree = cryptoAssessmentCertificateCompartmentIdInSubtree
  days_to_expiry            = cryptoAssessmentCertificateDaysToExpiry
  expiry_bucket             = cryptoAssessmentCertificateExpiryBucket
  public_key_types          = cryptoAssessmentCertificatePublicKeyType
  signature_algorithms      = cryptoAssessmentCertificateSignatureAlgorithm
  statuses                  = cryptoAssessmentCertificateStatus
  target_id                 = testTarget.id
  target_ids                = cryptoAssessmentCertificateTargetIds
}

    Using getCryptoAssessmentCertificates

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCryptoAssessmentCertificates(args: GetCryptoAssessmentCertificatesArgs, opts?: InvokeOptions): Promise<GetCryptoAssessmentCertificatesResult>
function getCryptoAssessmentCertificatesOutput(args: GetCryptoAssessmentCertificatesOutputArgs, opts?: InvokeOutputOptions): Output<GetCryptoAssessmentCertificatesResult>
    def get_crypto_assessment_certificates(access_level: Optional[str] = None,
                                       assessment_id: Optional[str] = None,
                                       assessment_type: Optional[str] = None,
                                       certificate_types: Optional[Sequence[str]] = None,
                                       compartment_id: Optional[str] = None,
                                       compartment_id_in_subtree: Optional[bool] = None,
                                       days_to_expiry: Optional[int] = None,
                                       expiry_bucket: Optional[str] = None,
                                       filters: Optional[Sequence[GetCryptoAssessmentCertificatesFilter]] = None,
                                       public_key_types: Optional[Sequence[str]] = None,
                                       signature_algorithms: Optional[Sequence[str]] = None,
                                       statuses: Optional[Sequence[str]] = None,
                                       target_id: Optional[str] = None,
                                       target_ids: Optional[Sequence[str]] = None,
                                       opts: Optional[InvokeOptions] = None) -> GetCryptoAssessmentCertificatesResult
def get_crypto_assessment_certificates_output(access_level: pulumi.Input[Optional[str]] = None,
                                       assessment_id: pulumi.Input[Optional[str]] = None,
                                       assessment_type: pulumi.Input[Optional[str]] = None,
                                       certificate_types: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                                       compartment_id: pulumi.Input[Optional[str]] = None,
                                       compartment_id_in_subtree: pulumi.Input[Optional[bool]] = None,
                                       days_to_expiry: pulumi.Input[Optional[int]] = None,
                                       expiry_bucket: pulumi.Input[Optional[str]] = None,
                                       filters: pulumi.Input[Optional[Sequence[pulumi.Input[GetCryptoAssessmentCertificatesFilterArgs]]]] = None,
                                       public_key_types: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                                       signature_algorithms: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                                       statuses: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                                       target_id: pulumi.Input[Optional[str]] = None,
                                       target_ids: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                                       opts: Optional[InvokeOutputOptions] = None) -> Output[GetCryptoAssessmentCertificatesResult]
    func GetCryptoAssessmentCertificates(ctx *Context, args *GetCryptoAssessmentCertificatesArgs, opts ...InvokeOption) (*GetCryptoAssessmentCertificatesResult, error)
func GetCryptoAssessmentCertificatesOutput(ctx *Context, args *GetCryptoAssessmentCertificatesOutputArgs, opts ...InvokeOption) GetCryptoAssessmentCertificatesResultOutput

    > Note: This function is named GetCryptoAssessmentCertificates in the Go SDK.

    public static class GetCryptoAssessmentCertificates 
{
    public static Task<GetCryptoAssessmentCertificatesResult> InvokeAsync(GetCryptoAssessmentCertificatesArgs args, InvokeOptions? opts = null)
    public static Output<GetCryptoAssessmentCertificatesResult> Invoke(GetCryptoAssessmentCertificatesInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetCryptoAssessmentCertificatesResult> Invoke(GetCryptoAssessmentCertificatesInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetCryptoAssessmentCertificatesResult> getCryptoAssessmentCertificates(GetCryptoAssessmentCertificatesArgs args, InvokeOptions options)
public static Output<GetCryptoAssessmentCertificatesResult> getCryptoAssessmentCertificates(GetCryptoAssessmentCertificatesArgs args, InvokeOptions options)
public static Output<GetCryptoAssessmentCertificatesResult> getCryptoAssessmentCertificates(GetCryptoAssessmentCertificatesArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: oci:DataSafe/getCryptoAssessmentCertificates:getCryptoAssessmentCertificates
  arguments:
    # arguments dictionary
    data "oci_data_safe_get_crypto_assessment_certificates" "name" {
    # arguments
}

    The following arguments are supported:

    CompartmentId string
    A filter to return only resources that match the specified compartment OCID.
    AccessLevel string
    Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
    AssessmentId string
    A filter to return only resources associated with the specified crypto assessment OCID.
    AssessmentType string
    A filter to return targets from assessments of the specified type.
    CertificateTypes List<string>
    A filter to return only certificates of any of the specified types.
    CompartmentIdInSubtree bool
    Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
    DaysToExpiry int
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    ExpiryBucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    Filters List<GetCryptoAssessmentCertificatesFilter>
    PublicKeyTypes List<string>
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    SignatureAlgorithms List<string>
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    Statuses List<string>
    A filter to return only certificates with any of the specified statuses.
    TargetId string
    A filter to return only inventory rows associated with the specified target OCID.
    TargetIds List<string>
    A filter to return only resources associated with any of the specified target OCIDs.
    CompartmentId string
    A filter to return only resources that match the specified compartment OCID.
    AccessLevel string
    Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
    AssessmentId string
    A filter to return only resources associated with the specified crypto assessment OCID.
    AssessmentType string
    A filter to return targets from assessments of the specified type.
    CertificateTypes []string
    A filter to return only certificates of any of the specified types.
    CompartmentIdInSubtree bool
    Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
    DaysToExpiry int
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    ExpiryBucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    Filters []GetCryptoAssessmentCertificatesFilter
    PublicKeyTypes []string
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    SignatureAlgorithms []string
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    Statuses []string
    A filter to return only certificates with any of the specified statuses.
    TargetId string
    A filter to return only inventory rows associated with the specified target OCID.
    TargetIds []string
    A filter to return only resources associated with any of the specified target OCIDs.
    compartment_id string
    A filter to return only resources that match the specified compartment OCID.
    access_level string
    Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
    assessment_id string
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessment_type string
    A filter to return targets from assessments of the specified type.
    certificate_types list(string)
    A filter to return only certificates of any of the specified types.
    compartment_id_in_subtree bool
    Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
    days_to_expiry number
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiry_bucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters list(object)
    public_key_types list(string)
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    signature_algorithms list(string)
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    statuses list(string)
    A filter to return only certificates with any of the specified statuses.
    target_id string
    A filter to return only inventory rows associated with the specified target OCID.
    target_ids list(string)
    A filter to return only resources associated with any of the specified target OCIDs.
    compartmentId String
    A filter to return only resources that match the specified compartment OCID.
    accessLevel String
    Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
    assessmentId String
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessmentType String
    A filter to return targets from assessments of the specified type.
    certificateTypes List<String>
    A filter to return only certificates of any of the specified types.
    compartmentIdInSubtree Boolean
    Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
    daysToExpiry Integer
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiryBucket String
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters List<GetCryptoAssessmentCertificatesFilter>
    publicKeyTypes List<String>
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    signatureAlgorithms List<String>
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    statuses List<String>
    A filter to return only certificates with any of the specified statuses.
    targetId String
    A filter to return only inventory rows associated with the specified target OCID.
    targetIds List<String>
    A filter to return only resources associated with any of the specified target OCIDs.
    compartmentId string
    A filter to return only resources that match the specified compartment OCID.
    accessLevel string
    Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
    assessmentId string
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessmentType string
    A filter to return targets from assessments of the specified type.
    certificateTypes string[]
    A filter to return only certificates of any of the specified types.
    compartmentIdInSubtree boolean
    Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
    daysToExpiry number
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiryBucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters GetCryptoAssessmentCertificatesFilter[]
    publicKeyTypes string[]
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    signatureAlgorithms string[]
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    statuses string[]
    A filter to return only certificates with any of the specified statuses.
    targetId string
    A filter to return only inventory rows associated with the specified target OCID.
    targetIds string[]
    A filter to return only resources associated with any of the specified target OCIDs.
    compartment_id str
    A filter to return only resources that match the specified compartment OCID.
    access_level str
    Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
    assessment_id str
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessment_type str
    A filter to return targets from assessments of the specified type.
    certificate_types Sequence[str]
    A filter to return only certificates of any of the specified types.
    compartment_id_in_subtree bool
    Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
    days_to_expiry int
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiry_bucket str
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters Sequence[GetCryptoAssessmentCertificatesFilter]
    public_key_types Sequence[str]
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    signature_algorithms Sequence[str]
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    statuses Sequence[str]
    A filter to return only certificates with any of the specified statuses.
    target_id str
    A filter to return only inventory rows associated with the specified target OCID.
    target_ids Sequence[str]
    A filter to return only resources associated with any of the specified target OCIDs.
    compartmentId String
    A filter to return only resources that match the specified compartment OCID.
    accessLevel String
    Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
    assessmentId String
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessmentType String
    A filter to return targets from assessments of the specified type.
    certificateTypes List<String>
    A filter to return only certificates of any of the specified types.
    compartmentIdInSubtree Boolean
    Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
    daysToExpiry Number
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiryBucket String
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters List<Property Map>
    publicKeyTypes List<String>
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    signatureAlgorithms List<String>
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    statuses List<String>
    A filter to return only certificates with any of the specified statuses.
    targetId String
    A filter to return only inventory rows associated with the specified target OCID.
    targetIds List<String>
    A filter to return only resources associated with any of the specified target OCIDs.

    getCryptoAssessmentCertificates Result

    The following output properties are available:

    CompartmentId string
    OCID of the compartment that contains the certificate row.
    CryptoAssessmentCertificateCollections List<GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollection>
    The list of crypto_assessment_certificate_collection.
    Id string
    The provider-assigned unique ID for this managed resource.
    AccessLevel string
    AssessmentId string
    OCID of the crypto assessment that discovered the certificate.
    AssessmentType string
    Type of the crypto assessment that discovered the certificate.
    CertificateTypes List<string>
    Type of certificate.
    CompartmentIdInSubtree bool
    DaysToExpiry int
    Number of whole days until certificate expiration, calculated from timeValidUntil. Negative values indicate already expired certificates.
    ExpiryBucket string
    Expiry bucket populated for the certificate when the assessment runs. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    Filters List<GetCryptoAssessmentCertificatesFilter>
    PublicKeyTypes List<string>
    Public key type and size.
    SignatureAlgorithms List<string>
    Signature algorithm used by the certificate.
    Statuses List<string>
    Certificate validity status.
    TargetId string
    OCID of the target database associated with the certificate.
    TargetIds List<string>
    CompartmentId string
    OCID of the compartment that contains the certificate row.
    CryptoAssessmentCertificateCollections []GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollection
    The list of crypto_assessment_certificate_collection.
    Id string
    The provider-assigned unique ID for this managed resource.
    AccessLevel string
    AssessmentId string
    OCID of the crypto assessment that discovered the certificate.
    AssessmentType string
    Type of the crypto assessment that discovered the certificate.
    CertificateTypes []string
    Type of certificate.
    CompartmentIdInSubtree bool
    DaysToExpiry int
    Number of whole days until certificate expiration, calculated from timeValidUntil. Negative values indicate already expired certificates.
    ExpiryBucket string
    Expiry bucket populated for the certificate when the assessment runs. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    Filters []GetCryptoAssessmentCertificatesFilter
    PublicKeyTypes []string
    Public key type and size.
    SignatureAlgorithms []string
    Signature algorithm used by the certificate.
    Statuses []string
    Certificate validity status.
    TargetId string
    OCID of the target database associated with the certificate.
    TargetIds []string
    compartment_id string
    OCID of the compartment that contains the certificate row.
    crypto_assessment_certificate_collections list(object)
    The list of crypto_assessment_certificate_collection.
    id string
    The provider-assigned unique ID for this managed resource.
    access_level string
    assessment_id string
    OCID of the crypto assessment that discovered the certificate.
    assessment_type string
    Type of the crypto assessment that discovered the certificate.
    certificate_types list(string)
    Type of certificate.
    compartment_id_in_subtree bool
    days_to_expiry number
    Number of whole days until certificate expiration, calculated from timeValidUntil. Negative values indicate already expired certificates.
    expiry_bucket string
    Expiry bucket populated for the certificate when the assessment runs. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters list(object)
    public_key_types list(string)
    Public key type and size.
    signature_algorithms list(string)
    Signature algorithm used by the certificate.
    statuses list(string)
    Certificate validity status.
    target_id string
    OCID of the target database associated with the certificate.
    target_ids list(string)
    compartmentId String
    OCID of the compartment that contains the certificate row.
    cryptoAssessmentCertificateCollections List<GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollection>
    The list of crypto_assessment_certificate_collection.
    id String
    The provider-assigned unique ID for this managed resource.
    accessLevel String
    assessmentId String
    OCID of the crypto assessment that discovered the certificate.
    assessmentType String
    Type of the crypto assessment that discovered the certificate.
    certificateTypes List<String>
    Type of certificate.
    compartmentIdInSubtree Boolean
    daysToExpiry Integer
    Number of whole days until certificate expiration, calculated from timeValidUntil. Negative values indicate already expired certificates.
    expiryBucket String
    Expiry bucket populated for the certificate when the assessment runs. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters List<GetCryptoAssessmentCertificatesFilter>
    publicKeyTypes List<String>
    Public key type and size.
    signatureAlgorithms List<String>
    Signature algorithm used by the certificate.
    statuses List<String>
    Certificate validity status.
    targetId String
    OCID of the target database associated with the certificate.
    targetIds List<String>
    compartmentId string
    OCID of the compartment that contains the certificate row.
    cryptoAssessmentCertificateCollections GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollection[]
    The list of crypto_assessment_certificate_collection.
    id string
    The provider-assigned unique ID for this managed resource.
    accessLevel string
    assessmentId string
    OCID of the crypto assessment that discovered the certificate.
    assessmentType string
    Type of the crypto assessment that discovered the certificate.
    certificateTypes string[]
    Type of certificate.
    compartmentIdInSubtree boolean
    daysToExpiry number
    Number of whole days until certificate expiration, calculated from timeValidUntil. Negative values indicate already expired certificates.
    expiryBucket string
    Expiry bucket populated for the certificate when the assessment runs. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters GetCryptoAssessmentCertificatesFilter[]
    publicKeyTypes string[]
    Public key type and size.
    signatureAlgorithms string[]
    Signature algorithm used by the certificate.
    statuses string[]
    Certificate validity status.
    targetId string
    OCID of the target database associated with the certificate.
    targetIds string[]
    compartment_id str
    OCID of the compartment that contains the certificate row.
    crypto_assessment_certificate_collections Sequence[GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollection]
    The list of crypto_assessment_certificate_collection.
    id str
    The provider-assigned unique ID for this managed resource.
    access_level str
    assessment_id str
    OCID of the crypto assessment that discovered the certificate.
    assessment_type str
    Type of the crypto assessment that discovered the certificate.
    certificate_types Sequence[str]
    Type of certificate.
    compartment_id_in_subtree bool
    days_to_expiry int
    Number of whole days until certificate expiration, calculated from timeValidUntil. Negative values indicate already expired certificates.
    expiry_bucket str
    Expiry bucket populated for the certificate when the assessment runs. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters Sequence[GetCryptoAssessmentCertificatesFilter]
    public_key_types Sequence[str]
    Public key type and size.
    signature_algorithms Sequence[str]
    Signature algorithm used by the certificate.
    statuses Sequence[str]
    Certificate validity status.
    target_id str
    OCID of the target database associated with the certificate.
    target_ids Sequence[str]
    compartmentId String
    OCID of the compartment that contains the certificate row.
    cryptoAssessmentCertificateCollections List<Property Map>
    The list of crypto_assessment_certificate_collection.
    id String
    The provider-assigned unique ID for this managed resource.
    accessLevel String
    assessmentId String
    OCID of the crypto assessment that discovered the certificate.
    assessmentType String
    Type of the crypto assessment that discovered the certificate.
    certificateTypes List<String>
    Type of certificate.
    compartmentIdInSubtree Boolean
    daysToExpiry Number
    Number of whole days until certificate expiration, calculated from timeValidUntil. Negative values indicate already expired certificates.
    expiryBucket String
    Expiry bucket populated for the certificate when the assessment runs. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    filters List<Property Map>
    publicKeyTypes List<String>
    Public key type and size.
    signatureAlgorithms List<String>
    Signature algorithm used by the certificate.
    statuses List<String>
    Certificate validity status.
    targetId String
    OCID of the target database associated with the certificate.
    targetIds List<String>

    Supporting Types

    GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollection

    Items []GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollectionItem
    Certificate summaries that match the request filters.
    items list(object)
    Certificate summaries that match the request filters.
    items GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollectionItem[]
    Certificate summaries that match the request filters.
    items List<Property Map>
    Certificate summaries that match the request filters.

    GetCryptoAssessmentCertificatesCryptoAssessmentCertificateCollectionItem

    Age string
    Age of the certificate in whole days, calculated from timeValidFrom using the current UTC date.
    AssessmentId string
    A filter to return only resources associated with the specified crypto assessment OCID.
    AssessmentType string
    A filter to return targets from assessments of the specified type.
    CertificateType string
    A filter to return only certificates of any of the specified types.
    CompartmentId string
    A filter to return only resources that match the specified compartment OCID.
    DaysToExpiry int
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    ExpiryBucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    Issuer string
    Issuer of the certificate.
    PublicKeyType string
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    SerialNumber string
    Certificate serial number.
    SignatureAlgorithm string
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    Status string
    A filter to return only certificates with any of the specified statuses.
    Subject string
    Subject of the certificate.
    TargetId string
    A filter to return only inventory rows associated with the specified target OCID.
    TimeLastAssessed string
    The date and time the associated crypto assessment was last assessed, in RFC3339 format.
    TimeValidFrom string
    Certificate validity start time in RFC3339 format.
    TimeValidUntil string
    Certificate validity end time in RFC3339 format.
    WalletLocation string
    Wallet location where the certificate was discovered, if available.
    Age string
    Age of the certificate in whole days, calculated from timeValidFrom using the current UTC date.
    AssessmentId string
    A filter to return only resources associated with the specified crypto assessment OCID.
    AssessmentType string
    A filter to return targets from assessments of the specified type.
    CertificateType string
    A filter to return only certificates of any of the specified types.
    CompartmentId string
    A filter to return only resources that match the specified compartment OCID.
    DaysToExpiry int
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    ExpiryBucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    Issuer string
    Issuer of the certificate.
    PublicKeyType string
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    SerialNumber string
    Certificate serial number.
    SignatureAlgorithm string
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    Status string
    A filter to return only certificates with any of the specified statuses.
    Subject string
    Subject of the certificate.
    TargetId string
    A filter to return only inventory rows associated with the specified target OCID.
    TimeLastAssessed string
    The date and time the associated crypto assessment was last assessed, in RFC3339 format.
    TimeValidFrom string
    Certificate validity start time in RFC3339 format.
    TimeValidUntil string
    Certificate validity end time in RFC3339 format.
    WalletLocation string
    Wallet location where the certificate was discovered, if available.
    age string
    Age of the certificate in whole days, calculated from timeValidFrom using the current UTC date.
    assessment_id string
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessment_type string
    A filter to return targets from assessments of the specified type.
    certificate_type string
    A filter to return only certificates of any of the specified types.
    compartment_id string
    A filter to return only resources that match the specified compartment OCID.
    days_to_expiry number
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiry_bucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    issuer string
    Issuer of the certificate.
    public_key_type string
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    serial_number string
    Certificate serial number.
    signature_algorithm string
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    status string
    A filter to return only certificates with any of the specified statuses.
    subject string
    Subject of the certificate.
    target_id string
    A filter to return only inventory rows associated with the specified target OCID.
    time_last_assessed string
    The date and time the associated crypto assessment was last assessed, in RFC3339 format.
    time_valid_from string
    Certificate validity start time in RFC3339 format.
    time_valid_until string
    Certificate validity end time in RFC3339 format.
    wallet_location string
    Wallet location where the certificate was discovered, if available.
    age String
    Age of the certificate in whole days, calculated from timeValidFrom using the current UTC date.
    assessmentId String
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessmentType String
    A filter to return targets from assessments of the specified type.
    certificateType String
    A filter to return only certificates of any of the specified types.
    compartmentId String
    A filter to return only resources that match the specified compartment OCID.
    daysToExpiry Integer
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiryBucket String
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    issuer String
    Issuer of the certificate.
    publicKeyType String
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    serialNumber String
    Certificate serial number.
    signatureAlgorithm String
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    status String
    A filter to return only certificates with any of the specified statuses.
    subject String
    Subject of the certificate.
    targetId String
    A filter to return only inventory rows associated with the specified target OCID.
    timeLastAssessed String
    The date and time the associated crypto assessment was last assessed, in RFC3339 format.
    timeValidFrom String
    Certificate validity start time in RFC3339 format.
    timeValidUntil String
    Certificate validity end time in RFC3339 format.
    walletLocation String
    Wallet location where the certificate was discovered, if available.
    age string
    Age of the certificate in whole days, calculated from timeValidFrom using the current UTC date.
    assessmentId string
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessmentType string
    A filter to return targets from assessments of the specified type.
    certificateType string
    A filter to return only certificates of any of the specified types.
    compartmentId string
    A filter to return only resources that match the specified compartment OCID.
    daysToExpiry number
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiryBucket string
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    issuer string
    Issuer of the certificate.
    publicKeyType string
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    serialNumber string
    Certificate serial number.
    signatureAlgorithm string
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    status string
    A filter to return only certificates with any of the specified statuses.
    subject string
    Subject of the certificate.
    targetId string
    A filter to return only inventory rows associated with the specified target OCID.
    timeLastAssessed string
    The date and time the associated crypto assessment was last assessed, in RFC3339 format.
    timeValidFrom string
    Certificate validity start time in RFC3339 format.
    timeValidUntil string
    Certificate validity end time in RFC3339 format.
    walletLocation string
    Wallet location where the certificate was discovered, if available.
    age str
    Age of the certificate in whole days, calculated from timeValidFrom using the current UTC date.
    assessment_id str
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessment_type str
    A filter to return targets from assessments of the specified type.
    certificate_type str
    A filter to return only certificates of any of the specified types.
    compartment_id str
    A filter to return only resources that match the specified compartment OCID.
    days_to_expiry int
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiry_bucket str
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    issuer str
    Issuer of the certificate.
    public_key_type str
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    serial_number str
    Certificate serial number.
    signature_algorithm str
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    status str
    A filter to return only certificates with any of the specified statuses.
    subject str
    Subject of the certificate.
    target_id str
    A filter to return only inventory rows associated with the specified target OCID.
    time_last_assessed str
    The date and time the associated crypto assessment was last assessed, in RFC3339 format.
    time_valid_from str
    Certificate validity start time in RFC3339 format.
    time_valid_until str
    Certificate validity end time in RFC3339 format.
    wallet_location str
    Wallet location where the certificate was discovered, if available.
    age String
    Age of the certificate in whole days, calculated from timeValidFrom using the current UTC date.
    assessmentId String
    A filter to return only resources associated with the specified crypto assessment OCID.
    assessmentType String
    A filter to return targets from assessments of the specified type.
    certificateType String
    A filter to return only certificates of any of the specified types.
    compartmentId String
    A filter to return only resources that match the specified compartment OCID.
    daysToExpiry Number
    A filter to return certificates whose validTill timestamp is on or before the current time plus the specified number of days. Negative values are allowed and filter certificates that expired on or before that many days ago.
    expiryBucket String
    A filter to return only certificates in the specified expiry bucket. Supported values are 0_15, 15_30, 30_60, 60_90, and 90_PLUS.
    issuer String
    Issuer of the certificate.
    publicKeyType String
    A filter to return only certificates with any of the specified public key types. Stored values are normalized forms such as RSA2048, RSA4096, or EC256.
    serialNumber String
    Certificate serial number.
    signatureAlgorithm String
    A filter to return only certificates whose signature algorithm contains any of the specified values. For example, use SHA1 to match SHA1-based certificate signatures.
    status String
    A filter to return only certificates with any of the specified statuses.
    subject String
    Subject of the certificate.
    targetId String
    A filter to return only inventory rows associated with the specified target OCID.
    timeLastAssessed String
    The date and time the associated crypto assessment was last assessed, in RFC3339 format.
    timeValidFrom String
    Certificate validity start time in RFC3339 format.
    timeValidUntil String
    Certificate validity end time in RFC3339 format.
    walletLocation String
    Wallet location where the certificate was discovered, if available.

    GetCryptoAssessmentCertificatesFilter

    Name string
    Values List<string>
    Regex bool
    Name string
    Values []string
    Regex bool
    name string
    values list(string)
    regex bool
    name String
    values List<String>
    regex Boolean
    name string
    values string[]
    regex boolean
    name str
    values Sequence[str]
    regex bool
    name String
    values List<String>
    regex Boolean

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo oci logo
    Viewing docs for Oracle Cloud Infrastructure v5.1.0
    published on Friday, Sep 25, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-oci

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial