Oracle Cloud Infrastructure v3.7.0, Sep 13 25

Oracle Cloud Infrastructure v3.7.0 published on Saturday, Sep 13, 2025 by Pulumi

oci.DataSafe.getSecurityAssessmentChecks

Explore with Pulumi AI

Oracle Cloud Infrastructure v3.7.0 published on Saturday, Sep 13, 2025 by Pulumi

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testSecurityAssessmentChecks = oci.DataSafe.getSecurityAssessmentChecks({
    securityAssessmentId: testSecurityAssessment.id,
    accessLevel: securityAssessmentCheckAccessLevel,
    compartmentIdInSubtree: securityAssessmentCheckCompartmentIdInSubtree,
    containsReferences: securityAssessmentCheckContainsReferences,
    containsSeverities: securityAssessmentCheckContainsSeverity,
    key: securityAssessmentCheckKey,
    suggestedSeverity: securityAssessmentCheckSuggestedSeverity,
});

import pulumi
import pulumi_oci as oci

test_security_assessment_checks = oci.DataSafe.get_security_assessment_checks(security_assessment_id=test_security_assessment["id"],
    access_level=security_assessment_check_access_level,
    compartment_id_in_subtree=security_assessment_check_compartment_id_in_subtree,
    contains_references=security_assessment_check_contains_references,
    contains_severities=security_assessment_check_contains_severity,
    key=security_assessment_check_key,
    suggested_severity=security_assessment_check_suggested_severity)

package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v3/go/oci/datasafe"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := datasafe.GetSecurityAssessmentChecks(ctx, &datasafe.GetSecurityAssessmentChecksArgs{
			SecurityAssessmentId:   testSecurityAssessment.Id,
			AccessLevel:            pulumi.StringRef(securityAssessmentCheckAccessLevel),
			CompartmentIdInSubtree: pulumi.BoolRef(securityAssessmentCheckCompartmentIdInSubtree),
			ContainsReferences:     securityAssessmentCheckContainsReferences,
			ContainsSeverities:     securityAssessmentCheckContainsSeverity,
			Key:                    pulumi.StringRef(securityAssessmentCheckKey),
			SuggestedSeverity:      pulumi.StringRef(securityAssessmentCheckSuggestedSeverity),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testSecurityAssessmentChecks = Oci.DataSafe.GetSecurityAssessmentChecks.Invoke(new()
    {
        SecurityAssessmentId = testSecurityAssessment.Id,
        AccessLevel = securityAssessmentCheckAccessLevel,
        CompartmentIdInSubtree = securityAssessmentCheckCompartmentIdInSubtree,
        ContainsReferences = securityAssessmentCheckContainsReferences,
        ContainsSeverities = securityAssessmentCheckContainsSeverity,
        Key = securityAssessmentCheckKey,
        SuggestedSeverity = securityAssessmentCheckSuggestedSeverity,
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.DataSafe.DataSafeFunctions;
import com.pulumi.oci.DataSafe.inputs.GetSecurityAssessmentChecksArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testSecurityAssessmentChecks = DataSafeFunctions.getSecurityAssessmentChecks(GetSecurityAssessmentChecksArgs.builder()
            .securityAssessmentId(testSecurityAssessment.id())
            .accessLevel(securityAssessmentCheckAccessLevel)
            .compartmentIdInSubtree(securityAssessmentCheckCompartmentIdInSubtree)
            .containsReferences(securityAssessmentCheckContainsReferences)
            .containsSeverities(securityAssessmentCheckContainsSeverity)
            .key(securityAssessmentCheckKey)
            .suggestedSeverity(securityAssessmentCheckSuggestedSeverity)
            .build());

    }
}

variables:
  testSecurityAssessmentChecks:
    fn::invoke:
      function: oci:DataSafe:getSecurityAssessmentChecks
      arguments:
        securityAssessmentId: ${testSecurityAssessment.id}
        accessLevel: ${securityAssessmentCheckAccessLevel}
        compartmentIdInSubtree: ${securityAssessmentCheckCompartmentIdInSubtree}
        containsReferences: ${securityAssessmentCheckContainsReferences}
        containsSeverities: ${securityAssessmentCheckContainsSeverity}
        key: ${securityAssessmentCheckKey}
        suggestedSeverity: ${securityAssessmentCheckSuggestedSeverity}

Using getSecurityAssessmentChecks

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getSecurityAssessmentChecks(args: GetSecurityAssessmentChecksArgs, opts?: InvokeOptions): Promise<GetSecurityAssessmentChecksResult>
function getSecurityAssessmentChecksOutput(args: GetSecurityAssessmentChecksOutputArgs, opts?: InvokeOptions): Output<GetSecurityAssessmentChecksResult>

def get_security_assessment_checks(access_level: Optional[str] = None,
                                   compartment_id_in_subtree: Optional[bool] = None,
                                   contains_references: Optional[Sequence[str]] = None,
                                   contains_severities: Optional[Sequence[str]] = None,
                                   filters: Optional[Sequence[GetSecurityAssessmentChecksFilter]] = None,
                                   key: Optional[str] = None,
                                   security_assessment_id: Optional[str] = None,
                                   suggested_severity: Optional[str] = None,
                                   opts: Optional[InvokeOptions] = None) -> GetSecurityAssessmentChecksResult
def get_security_assessment_checks_output(access_level: Optional[pulumi.Input[str]] = None,
                                   compartment_id_in_subtree: Optional[pulumi.Input[bool]] = None,
                                   contains_references: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                                   contains_severities: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                                   filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetSecurityAssessmentChecksFilterArgs]]]] = None,
                                   key: Optional[pulumi.Input[str]] = None,
                                   security_assessment_id: Optional[pulumi.Input[str]] = None,
                                   suggested_severity: Optional[pulumi.Input[str]] = None,
                                   opts: Optional[InvokeOptions] = None) -> Output[GetSecurityAssessmentChecksResult]

func GetSecurityAssessmentChecks(ctx *Context, args *GetSecurityAssessmentChecksArgs, opts ...InvokeOption) (*GetSecurityAssessmentChecksResult, error)
func GetSecurityAssessmentChecksOutput(ctx *Context, args *GetSecurityAssessmentChecksOutputArgs, opts ...InvokeOption) GetSecurityAssessmentChecksResultOutput

> Note: This function is named GetSecurityAssessmentChecks in the Go SDK.

public static class GetSecurityAssessmentChecks 
{
    public static Task<GetSecurityAssessmentChecksResult> InvokeAsync(GetSecurityAssessmentChecksArgs args, InvokeOptions? opts = null)
    public static Output<GetSecurityAssessmentChecksResult> Invoke(GetSecurityAssessmentChecksInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetSecurityAssessmentChecksResult> getSecurityAssessmentChecks(GetSecurityAssessmentChecksArgs args, InvokeOptions options)
public static Output<GetSecurityAssessmentChecksResult> getSecurityAssessmentChecks(GetSecurityAssessmentChecksArgs args, InvokeOptions options)

fn::invoke:
  function: oci:DataSafe/getSecurityAssessmentChecks:getSecurityAssessmentChecks
  arguments:
    # arguments dictionary

The following arguments are supported:

SecurityAssessmentId string: The OCID of the security assessment.
AccessLevel string: Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
CompartmentIdInSubtree bool: Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
ContainsReferences List<string>: An optional filter to return only findings that match the specified references. Use containsReferences param if need to filter by multiple references.
ContainsSeverities List<string>: A filter to return only findings that match the specified risk level(s). Use containsSeverity parameter if need to filter by multiple risk levels.
Filters List<GetSecurityAssessmentChecksFilter>
Key string: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
SuggestedSeverity string: A filter to return only checks of a particular risk level.

SecurityAssessmentId string: The OCID of the security assessment.
AccessLevel string: Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
CompartmentIdInSubtree bool: Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
ContainsReferences []string: An optional filter to return only findings that match the specified references. Use containsReferences param if need to filter by multiple references.
ContainsSeverities []string: A filter to return only findings that match the specified risk level(s). Use containsSeverity parameter if need to filter by multiple risk levels.
Filters []GetSecurityAssessmentChecksFilter
Key string: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
SuggestedSeverity string: A filter to return only checks of a particular risk level.

securityAssessmentId String: The OCID of the security assessment.
accessLevel String: Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
compartmentIdInSubtree Boolean: Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
containsReferences List<String>: An optional filter to return only findings that match the specified references. Use containsReferences param if need to filter by multiple references.
containsSeverities List<String>: A filter to return only findings that match the specified risk level(s). Use containsSeverity parameter if need to filter by multiple risk levels.
filters List<GetSecurityAssessmentChecksFilter>
key String: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
suggestedSeverity String: A filter to return only checks of a particular risk level.

securityAssessmentId string: The OCID of the security assessment.
accessLevel string: Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
compartmentIdInSubtree boolean: Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
containsReferences string[]: An optional filter to return only findings that match the specified references. Use containsReferences param if need to filter by multiple references.
containsSeverities string[]: A filter to return only findings that match the specified risk level(s). Use containsSeverity parameter if need to filter by multiple risk levels.
filters GetSecurityAssessmentChecksFilter[]
key string: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
suggestedSeverity string: A filter to return only checks of a particular risk level.

security_assessment_id str: The OCID of the security assessment.
access_level str: Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
compartment_id_in_subtree bool: Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
contains_references Sequence[str]: An optional filter to return only findings that match the specified references. Use containsReferences param if need to filter by multiple references.
contains_severities Sequence[str]: A filter to return only findings that match the specified risk level(s). Use containsSeverity parameter if need to filter by multiple risk levels.
filters Sequence[GetSecurityAssessmentChecksFilter]
key str: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
suggested_severity str: A filter to return only checks of a particular risk level.

securityAssessmentId String: The OCID of the security assessment.
accessLevel String: Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
compartmentIdInSubtree Boolean: Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
containsReferences List<String>: An optional filter to return only findings that match the specified references. Use containsReferences param if need to filter by multiple references.
containsSeverities List<String>: A filter to return only findings that match the specified risk level(s). Use containsSeverity parameter if need to filter by multiple risk levels.
filters List<Property Map>
key String: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
suggestedSeverity String: A filter to return only checks of a particular risk level.

getSecurityAssessmentChecks Result

The following output properties are available:

Checks List<GetSecurityAssessmentChecksCheck>: The list of checks.
Id string: The provider-assigned unique ID for this managed resource.
SecurityAssessmentId string
AccessLevel string
CompartmentIdInSubtree bool
ContainsReferences List<string>
ContainsSeverities List<string>
Filters List<GetSecurityAssessmentChecksFilter>
Key string: A unique identifier for the check.
SuggestedSeverity string: The severity of the check as suggested by Data Safe security assessment. This will be the default severity in the template baseline security assessment.

Checks []GetSecurityAssessmentChecksCheck: The list of checks.
Id string: The provider-assigned unique ID for this managed resource.
SecurityAssessmentId string
AccessLevel string
CompartmentIdInSubtree bool
ContainsReferences []string
ContainsSeverities []string
Filters []GetSecurityAssessmentChecksFilter
Key string: A unique identifier for the check.
SuggestedSeverity string: The severity of the check as suggested by Data Safe security assessment. This will be the default severity in the template baseline security assessment.

checks List<GetSecurityAssessmentChecksCheck>: The list of checks.
id String: The provider-assigned unique ID for this managed resource.
securityAssessmentId String
accessLevel String
compartmentIdInSubtree Boolean
containsReferences List<String>
containsSeverities List<String>
filters List<GetSecurityAssessmentChecksFilter>
key String: A unique identifier for the check.
suggestedSeverity String: The severity of the check as suggested by Data Safe security assessment. This will be the default severity in the template baseline security assessment.

checks GetSecurityAssessmentChecksCheck[]: The list of checks.
id string: The provider-assigned unique ID for this managed resource.
securityAssessmentId string
accessLevel string
compartmentIdInSubtree boolean
containsReferences string[]
containsSeverities string[]
filters GetSecurityAssessmentChecksFilter[]
key string: A unique identifier for the check.
suggestedSeverity string: The severity of the check as suggested by Data Safe security assessment. This will be the default severity in the template baseline security assessment.

checks Sequence[GetSecurityAssessmentChecksCheck]: The list of checks.
id str: The provider-assigned unique ID for this managed resource.
security_assessment_id str
access_level str
compartment_id_in_subtree bool
contains_references Sequence[str]
contains_severities Sequence[str]
filters Sequence[GetSecurityAssessmentChecksFilter]
key str: A unique identifier for the check.
suggested_severity str: The severity of the check as suggested by Data Safe security assessment. This will be the default severity in the template baseline security assessment.

checks List<Property Map>: The list of checks.
id String: The provider-assigned unique ID for this managed resource.
securityAssessmentId String
accessLevel String
compartmentIdInSubtree Boolean
containsReferences List<String>
containsSeverities List<String>
filters List<Property Map>
key String: A unique identifier for the check.
suggestedSeverity String: The severity of the check as suggested by Data Safe security assessment. This will be the default severity in the template baseline security assessment.

Supporting Types

GetSecurityAssessmentChecksCheck

Category string: The category to which the check belongs to.
Key string: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
Oneline string: Provides a recommended approach to take to remediate the check reported.
References List<GetSecurityAssessmentChecksCheckReference>: Provides information on whether the check is related to a CIS Oracle Database Benchmark recommendation, STIG rule, GDPR Article/Recital or related to the Oracle Best Practice.
Remarks string: The explanation of the issue in this check. It explains the reason for the rule and, if a risk is reported, it may also explain the recommended actions for remediation.
SecurityAssessmentId string: The OCID of the security assessment.
SuggestedSeverity string: A filter to return only checks of a particular risk level.
Title string: The short title for the check.
PatchOperations List<GetSecurityAssessmentChecksCheckPatchOperation>

Category string: The category to which the check belongs to.
Key string: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
Oneline string: Provides a recommended approach to take to remediate the check reported.
References []GetSecurityAssessmentChecksCheckReference: Provides information on whether the check is related to a CIS Oracle Database Benchmark recommendation, STIG rule, GDPR Article/Recital or related to the Oracle Best Practice.
Remarks string: The explanation of the issue in this check. It explains the reason for the rule and, if a risk is reported, it may also explain the recommended actions for remediation.
SecurityAssessmentId string: The OCID of the security assessment.
SuggestedSeverity string: A filter to return only checks of a particular risk level.
Title string: The short title for the check.
PatchOperations []GetSecurityAssessmentChecksCheckPatchOperation

category String: The category to which the check belongs to.
key String: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
oneline String: Provides a recommended approach to take to remediate the check reported.
references List<GetSecurityAssessmentChecksCheckReference>: Provides information on whether the check is related to a CIS Oracle Database Benchmark recommendation, STIG rule, GDPR Article/Recital or related to the Oracle Best Practice.
remarks String: The explanation of the issue in this check. It explains the reason for the rule and, if a risk is reported, it may also explain the recommended actions for remediation.
securityAssessmentId String: The OCID of the security assessment.
suggestedSeverity String: A filter to return only checks of a particular risk level.
title String: The short title for the check.
patchOperations List<GetSecurityAssessmentChecksCheckPatchOperation>

category string: The category to which the check belongs to.
key string: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
oneline string: Provides a recommended approach to take to remediate the check reported.
references GetSecurityAssessmentChecksCheckReference[]: Provides information on whether the check is related to a CIS Oracle Database Benchmark recommendation, STIG rule, GDPR Article/Recital or related to the Oracle Best Practice.
remarks string: The explanation of the issue in this check. It explains the reason for the rule and, if a risk is reported, it may also explain the recommended actions for remediation.
securityAssessmentId string: The OCID of the security assessment.
suggestedSeverity string: A filter to return only checks of a particular risk level.
title string: The short title for the check.
patchOperations GetSecurityAssessmentChecksCheckPatchOperation[]

category str: The category to which the check belongs to.
key str: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
oneline str: Provides a recommended approach to take to remediate the check reported.
references Sequence[GetSecurityAssessmentChecksCheckReference]: Provides information on whether the check is related to a CIS Oracle Database Benchmark recommendation, STIG rule, GDPR Article/Recital or related to the Oracle Best Practice.
remarks str: The explanation of the issue in this check. It explains the reason for the rule and, if a risk is reported, it may also explain the recommended actions for remediation.
security_assessment_id str: The OCID of the security assessment.
suggested_severity str: A filter to return only checks of a particular risk level.
title str: The short title for the check.
patch_operations Sequence[GetSecurityAssessmentChecksCheckPatchOperation]

category String: The category to which the check belongs to.
key String: Each check in security assessment has an associated key (think of key as a check's name). For a given check, the key will be the same across targets. The user can use these keys to filter the checks.
oneline String: Provides a recommended approach to take to remediate the check reported.
references List<Property Map>: Provides information on whether the check is related to a CIS Oracle Database Benchmark recommendation, STIG rule, GDPR Article/Recital or related to the Oracle Best Practice.
remarks String: The explanation of the issue in this check. It explains the reason for the rule and, if a risk is reported, it may also explain the recommended actions for remediation.
securityAssessmentId String: The OCID of the security assessment.
suggestedSeverity String: A filter to return only checks of a particular risk level.
title String: The short title for the check.
patchOperations List<Property Map>

GetSecurityAssessmentChecksCheckPatchOperation

Operation string
Selection string
Value Dictionary<string, string>

Operation string
Selection string
Value map[string]string

operation String
selection String
value Map<String,String>

operation string
selection string
value {[key: string]: string}

operation str
selection str
value Mapping[str, str]

operation String
selection String
value Map<String>

GetSecurityAssessmentChecksCheckReference

Cis string: Relevant section from CIS.
Gdpr string: Relevant section from GDPR.
Obp string: Relevant section from OBP.
Stig string: Relevant section from STIG.

Cis string: Relevant section from CIS.
Gdpr string: Relevant section from GDPR.
Obp string: Relevant section from OBP.
Stig string: Relevant section from STIG.

cis String: Relevant section from CIS.
gdpr String: Relevant section from GDPR.
obp String: Relevant section from OBP.
stig String: Relevant section from STIG.

cis string: Relevant section from CIS.
gdpr string: Relevant section from GDPR.
obp string: Relevant section from OBP.
stig string: Relevant section from STIG.

cis str: Relevant section from CIS.
gdpr str: Relevant section from GDPR.
obp str: Relevant section from OBP.
stig str: Relevant section from STIG.

cis String: Relevant section from CIS.
gdpr String: Relevant section from GDPR.
obp String: Relevant section from OBP.
stig String: Relevant section from STIG.

GetSecurityAssessmentChecksFilter

Name string
Values List<string>
Regex bool

Name string
Values []string
Regex bool

name String
values List<String>
regex Boolean

name string
values string[]
regex boolean

name str
values Sequence[str]
regex bool

name String
values List<String>
regex Boolean

Package Details

Repository: oci pulumi/pulumi-oci
License: Apache-2.0
Notes: This Pulumi package is based on the oci Terraform Provider.

Oracle Cloud Infrastructure v3.7.0 published on Saturday, Sep 13, 2025 by Pulumi

pulumi/pulumi-oci

oci.DataSafe.getSecurityAssessmentChecks

On this page

On this page

Example Usage

Using getSecurityAssessmentChecks

getSecurityAssessmentChecks Result

Supporting Types

GetSecurityAssessmentChecksCheck

GetSecurityAssessmentChecksCheckPatchOperation

GetSecurityAssessmentChecksCheckReference

GetSecurityAssessmentChecksFilter

Package Details

On this page

On this page