import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * This resource provides the Security Assessment resource in Oracle Cloud Infrastructure Data Safe service. * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/data-safe/latest/SecurityAssessment * * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/datasafe * * Creates a new saved security assessment for a target database or target database group in a compartment. When this operation is performed, * it will save the latest assessment in the specified compartment. If a schedule is passed, it will persist the latest assessment, * at the defined date and time, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). * * ## Import * * SecurityAssessments can be imported using the `id`, e.g. * * ```sh * $ pulumi import oci:DataSafe/securityAssessment:SecurityAssessment test_security_assessment "id" * ``` */ export declare class SecurityAssessment extends pulumi.CustomResource { /** * Get an existing SecurityAssessment resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: SecurityAssessmentState, opts?: pulumi.CustomResourceOptions): SecurityAssessment; /** * Returns true if the given object is an instance of SecurityAssessment. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is SecurityAssessment; /** * (Updatable) An optional property when incremented triggers Apply Template. Could be set to any integer value. */ readonly applyTemplateTrigger: pulumi.Output; /** * The OCID of the security assessment. The assessment should be of type SAVED. It will be required while creating the template baseline assessment for individual targets to fetch the detailed information from an existing security assessment. */ readonly baseSecurityAssessmentId: pulumi.Output; /** * The ocid of a security assessment which is of type TEMPLATE_BASELINE, this will be null or empty when type is TEMPLATE_BASELINE. */ readonly baselineAssessmentId: pulumi.Output; /** * The security checks to be evaluated for type template. */ readonly checks: pulumi.Output; /** * (Updatable) An optional property when incremented triggers Compare To Template Baseline. Could be set to any integer value. */ readonly compareToTemplateBaselineTrigger: pulumi.Output; /** * (Updatable) The OCID of the compartment that contains the security assessment. */ readonly compartmentId: pulumi.Output; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm) Example: `{"Operations.CostCenter": "42"}` */ readonly definedTags: pulumi.Output<{ [key: string]: string; }>; /** * (Updatable) Description of the security assessment. */ readonly description: pulumi.Output; /** * (Updatable) The display name of the security assessment. */ readonly displayName: pulumi.Output; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm) Example: `{"Department": "Finance"}` */ readonly freeformTags: pulumi.Output<{ [key: string]: string; }>; /** * List containing maps as values. Example: `{"Operations": [ {"CostCenter": "42"} ] }` */ readonly ignoredAssessmentIds: pulumi.Output; /** * List containing maps as values. Example: `{"Operations": [ {"CostCenter": "42"} ] }` */ readonly ignoredTargets: pulumi.Output; /** * (Updatable) Indicates whether the assessment is scheduled to run. */ readonly isAssessmentScheduled: pulumi.Output; /** * Indicates whether or not the security assessment is set as a baseline. This is applicable only for saved security assessments. */ readonly isBaseline: pulumi.Output; /** * Indicates whether or not the security assessment deviates from the baseline. */ readonly isDeviatedFromBaseline: pulumi.Output; /** * The OCID of the baseline against which the latest security assessment was compared. */ readonly lastComparedBaselineId: pulumi.Output; /** * Details about the current state of the security assessment. */ readonly lifecycleDetails: pulumi.Output; /** * The summary of findings for the security assessment. */ readonly link: pulumi.Output; /** * (Updatable) An optional property when incremented triggers Remove Template. Could be set to any integer value. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ readonly removeTemplateTrigger: pulumi.Output; /** * (Updatable) To schedule the assessment for running periodically, specify the schedule in this attribute. Create or schedule one assessment per compartment. If not defined, the assessment runs immediately. Format - ; * * Allowed version strings - "v1" v1's version specific schedule - Each of the above fields potentially introduce constraints. A workrequest is created only when clock time satisfies all the constraints. Constraints introduced: 1. seconds = (So, the allowed range for is [0, 59]) 2. minutes = (So, the allowed range for is [0, 59]) 3. hours = (So, the allowed range for is [0, 23]) can be either '*' (without quotes or a number between 1(Monday) and 7(Sunday)) 4. No constraint introduced when it is '*'. When not, day of week must equal the given value can be either '*' (without quotes or a number between 1 and 28) 5. No constraint introduced when it is '*'. When not, day of month must equal the given value */ readonly schedule: pulumi.Output; /** * The OCID of the security assessment that is responsible for creating this scheduled save assessment. */ readonly scheduleSecurityAssessmentId: pulumi.Output; /** * The current state of the security assessment. */ readonly state: pulumi.Output; /** * Statistics showing the number of findings for each category grouped by risk levels for all the targets in the specified security assessment. */ readonly statistics: pulumi.Output; /** * System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{"orcl-cloud.free-tier-retained": "true"}` */ readonly systemTags: pulumi.Output<{ [key: string]: string; }>; /** * The OCID of the target database group that the group assessment is created for. */ readonly targetDatabaseGroupId: pulumi.Output; /** * The OCID of the target database or target database group on which security assessment is to be run. */ readonly targetId: pulumi.Output; /** * Array of database target OCIDs. */ readonly targetIds: pulumi.Output; /** * The type of security assessment resource whether it is individual or group resource. For individual target use type TARGET_DATABASE and for group resource use type TARGET_DATABASE_GROUP. If not provided, TARGET_DATABASE would be used as default value. */ readonly targetType: pulumi.Output; /** * The version of the target database. */ readonly targetVersion: pulumi.Output; /** * The OCID of the template assessment. It will be required while creating the template baseline assessment. */ readonly templateAssessmentId: pulumi.Output; /** * The date and time the security assessment was created, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ readonly timeCreated: pulumi.Output; /** * The date and time the security assessment was last executed, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ readonly timeLastAssessed: pulumi.Output; /** * The date and time the security assessment was last updated, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ readonly timeUpdated: pulumi.Output; /** * Indicates whether the security assessment was created by system or by a user. */ readonly triggeredBy: pulumi.Output; /** * The type of the security assessment */ readonly type: pulumi.Output; /** * Create a SecurityAssessment resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: SecurityAssessmentArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering SecurityAssessment resources. */ export interface SecurityAssessmentState { /** * (Updatable) An optional property when incremented triggers Apply Template. Could be set to any integer value. */ applyTemplateTrigger?: pulumi.Input; /** * The OCID of the security assessment. The assessment should be of type SAVED. It will be required while creating the template baseline assessment for individual targets to fetch the detailed information from an existing security assessment. */ baseSecurityAssessmentId?: pulumi.Input; /** * The ocid of a security assessment which is of type TEMPLATE_BASELINE, this will be null or empty when type is TEMPLATE_BASELINE. */ baselineAssessmentId?: pulumi.Input; /** * The security checks to be evaluated for type template. */ checks?: pulumi.Input[] | undefined>; /** * (Updatable) An optional property when incremented triggers Compare To Template Baseline. Could be set to any integer value. */ compareToTemplateBaselineTrigger?: pulumi.Input; /** * (Updatable) The OCID of the compartment that contains the security assessment. */ compartmentId?: pulumi.Input; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm) Example: `{"Operations.CostCenter": "42"}` */ definedTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) Description of the security assessment. */ description?: pulumi.Input; /** * (Updatable) The display name of the security assessment. */ displayName?: pulumi.Input; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm) Example: `{"Department": "Finance"}` */ freeformTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * List containing maps as values. Example: `{"Operations": [ {"CostCenter": "42"} ] }` */ ignoredAssessmentIds?: pulumi.Input[] | undefined>; /** * List containing maps as values. Example: `{"Operations": [ {"CostCenter": "42"} ] }` */ ignoredTargets?: pulumi.Input[] | undefined>; /** * (Updatable) Indicates whether the assessment is scheduled to run. */ isAssessmentScheduled?: pulumi.Input; /** * Indicates whether or not the security assessment is set as a baseline. This is applicable only for saved security assessments. */ isBaseline?: pulumi.Input; /** * Indicates whether or not the security assessment deviates from the baseline. */ isDeviatedFromBaseline?: pulumi.Input; /** * The OCID of the baseline against which the latest security assessment was compared. */ lastComparedBaselineId?: pulumi.Input; /** * Details about the current state of the security assessment. */ lifecycleDetails?: pulumi.Input; /** * The summary of findings for the security assessment. */ link?: pulumi.Input; /** * (Updatable) An optional property when incremented triggers Remove Template. Could be set to any integer value. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ removeTemplateTrigger?: pulumi.Input; /** * (Updatable) To schedule the assessment for running periodically, specify the schedule in this attribute. Create or schedule one assessment per compartment. If not defined, the assessment runs immediately. Format - ; * * Allowed version strings - "v1" v1's version specific schedule - Each of the above fields potentially introduce constraints. A workrequest is created only when clock time satisfies all the constraints. Constraints introduced: 1. seconds = (So, the allowed range for is [0, 59]) 2. minutes = (So, the allowed range for is [0, 59]) 3. hours = (So, the allowed range for is [0, 23]) can be either '*' (without quotes or a number between 1(Monday) and 7(Sunday)) 4. No constraint introduced when it is '*'. When not, day of week must equal the given value can be either '*' (without quotes or a number between 1 and 28) 5. No constraint introduced when it is '*'. When not, day of month must equal the given value */ schedule?: pulumi.Input; /** * The OCID of the security assessment that is responsible for creating this scheduled save assessment. */ scheduleSecurityAssessmentId?: pulumi.Input; /** * The current state of the security assessment. */ state?: pulumi.Input; /** * Statistics showing the number of findings for each category grouped by risk levels for all the targets in the specified security assessment. */ statistics?: pulumi.Input[] | undefined>; /** * System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{"orcl-cloud.free-tier-retained": "true"}` */ systemTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * The OCID of the target database group that the group assessment is created for. */ targetDatabaseGroupId?: pulumi.Input; /** * The OCID of the target database or target database group on which security assessment is to be run. */ targetId?: pulumi.Input; /** * Array of database target OCIDs. */ targetIds?: pulumi.Input[] | undefined>; /** * The type of security assessment resource whether it is individual or group resource. For individual target use type TARGET_DATABASE and for group resource use type TARGET_DATABASE_GROUP. If not provided, TARGET_DATABASE would be used as default value. */ targetType?: pulumi.Input; /** * The version of the target database. */ targetVersion?: pulumi.Input; /** * The OCID of the template assessment. It will be required while creating the template baseline assessment. */ templateAssessmentId?: pulumi.Input; /** * The date and time the security assessment was created, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ timeCreated?: pulumi.Input; /** * The date and time the security assessment was last executed, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ timeLastAssessed?: pulumi.Input; /** * The date and time the security assessment was last updated, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ timeUpdated?: pulumi.Input; /** * Indicates whether the security assessment was created by system or by a user. */ triggeredBy?: pulumi.Input; /** * The type of the security assessment */ type?: pulumi.Input; } /** * The set of arguments for constructing a SecurityAssessment resource. */ export interface SecurityAssessmentArgs { /** * (Updatable) An optional property when incremented triggers Apply Template. Could be set to any integer value. */ applyTemplateTrigger?: pulumi.Input; /** * The OCID of the security assessment. The assessment should be of type SAVED. It will be required while creating the template baseline assessment for individual targets to fetch the detailed information from an existing security assessment. */ baseSecurityAssessmentId?: pulumi.Input; /** * (Updatable) An optional property when incremented triggers Compare To Template Baseline. Could be set to any integer value. */ compareToTemplateBaselineTrigger?: pulumi.Input; /** * (Updatable) The OCID of the compartment that contains the security assessment. */ compartmentId: pulumi.Input; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm) Example: `{"Operations.CostCenter": "42"}` */ definedTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) Description of the security assessment. */ description?: pulumi.Input; /** * (Updatable) The display name of the security assessment. */ displayName?: pulumi.Input; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm) Example: `{"Department": "Finance"}` */ freeformTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) Indicates whether the assessment is scheduled to run. */ isAssessmentScheduled?: pulumi.Input; /** * (Updatable) An optional property when incremented triggers Remove Template. Could be set to any integer value. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ removeTemplateTrigger?: pulumi.Input; /** * (Updatable) To schedule the assessment for running periodically, specify the schedule in this attribute. Create or schedule one assessment per compartment. If not defined, the assessment runs immediately. Format - ; * * Allowed version strings - "v1" v1's version specific schedule - Each of the above fields potentially introduce constraints. A workrequest is created only when clock time satisfies all the constraints. Constraints introduced: 1. seconds = (So, the allowed range for is [0, 59]) 2. minutes = (So, the allowed range for is [0, 59]) 3. hours = (So, the allowed range for is [0, 23]) can be either '*' (without quotes or a number between 1(Monday) and 7(Sunday)) 4. No constraint introduced when it is '*'. When not, day of week must equal the given value can be either '*' (without quotes or a number between 1 and 28) 5. No constraint introduced when it is '*'. When not, day of month must equal the given value */ schedule?: pulumi.Input; /** * The OCID of the target database or target database group on which security assessment is to be run. */ targetId?: pulumi.Input; /** * The type of security assessment resource whether it is individual or group resource. For individual target use type TARGET_DATABASE and for group resource use type TARGET_DATABASE_GROUP. If not provided, TARGET_DATABASE would be used as default value. */ targetType?: pulumi.Input; /** * The OCID of the template assessment. It will be required while creating the template baseline assessment. */ templateAssessmentId?: pulumi.Input; /** * The type of the security assessment */ type?: pulumi.Input; } //# sourceMappingURL=securityAssessment.d.ts.map