Oracle Data Safe
Database security assessment, activity auditing, discovery and masking.
- Provider
- oci
- Kind
- Policy engine
- Category
- Operations
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| activityAuditing | boolean | — | no | false | inherited |
| dataMasking | boolean | — | no | false | inherited |
| effect | enum | audit | deny | modify | deploy-if-not-exists | no | — | ▸ audit |
| enforcementMode | enum | enforced | disabled | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| onlineAuditRetentionMonths | integer | — | no | 1 | inherited |
| policyCount | integer | — | no | — | inherited |
| remediation | boolean | — | no | false | ▸ false |
| scope | enum | resource | group | account | organization | no | — | ▸ resource |
| securityAssessmentSchedule | enum | weekly | no | weekly | inherited |
| sqlFirewall | boolean | — | no | false | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "data-safe", component: "oci-data-safe" }Cloud Configalibaba-cloud-configData Security Centeralibaba-data-security-centerAmazon CodeGuru Revieweraws-codeguru-reviewerAWS Configaws-configAWS Control Toweraws-control-towerIAM Access Analyzeraws-iam-access-analyzerAWS Lake Formationaws-lake-formationAWS License Manageraws-license-managerAWS Organizationsaws-organizationsAWS Resource Access Manageraws-ramAmazon Verified Permissionsaws-verified-permissionsMicrosoft Entra Conditional Accessazure-conditional-accessAzure Policyazure-policyMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementCloudflare Data Loss Preventioncloudflare-dlpCalypsoAIcalypsoaiCerboscerbosOPA GatekeepergatekeeperGuardrails AIguardrails-aiHiddenLayer AI Security PlatformhiddenlayerKubeArmorkubearmorKubewardenkubewardenKyvernokyvernoLakera Guardlakera-guardLLM Guardllm-guardNeMo Guardrailsnemo-guardrailsOpen Policy AgentopaPermit.iopermit-ioGeneric policy enginepolicy-enginePrompt Securityprompt-securityProtect AIprotect-aiRebuffrebuffRobust Intelligencerobust-intelligenceSonarQube ServersonarqubeDigitalOcean CSPMdigitalocean-cspmAccess Context Managergoogle-access-context-managerAssured Workloadsgoogle-assured-workloadsBinary Authorizationgoogle-binary-authorizationIdentity and Access Managementgoogle-cloud-iamFirebase App Checkgoogle-firebase-app-check
and 16 more → Policy engine page# yaml-language-server: $schema=../../schema/component.schema.json # Oracle Data Safe target: security posture, user risk, sensitive data discovery, masking, activity # auditing, alerts and SQL Firewall for a registered database. "Oracle Data Safe Overview" and # "Manage Security Assessments": a dedicated Data Safe database per tenancy and region, security # assessments scheduled weekly on their own, and audit data kept online for one month at a minimum. schemaVersion: "1" type: "component" id: "oci-data-safe" kind: "policy-engine" provider: "oci" docs: "https://docs.oracle.com/en-us/iaas/data-safe/doc/oracle-data-safe-overview.html" defaults: managed: true effect: "audit" scope: "resource" remediation: false properties: securityAssessmentSchedule: type: "enum" values: ["weekly"] default: "weekly" onlineAuditRetentionMonths: type: "integer" default: 1 activityAuditing: type: "boolean" default: false sqlFirewall: type: "boolean" default: false dataMasking: type: "boolean" default: false