Oracle Data Safe

ociPolicy engineoci-data-safe

Database security assessment, activity auditing, discovery and masking.

Provider
oci
Category
Operations
Properties · 4 set by this component
propertytypevaluesrequiredkind defaultthis component
activityAuditing · component propertyboolean—nofalseinherited
dataMasking · component propertyboolean—nofalseinherited
effectenumaudit | deny | modify | deploy-if-not-existsno—▸ audit
enforcementModeenumenforced | disabledno—inherited
managedboolean—nofalse▸ true
onlineAuditRetentionMonths · component propertyinteger—no1inherited
policyCountinteger—no—inherited
remediationboolean—nofalse▸ false
scopeenumresource | group | account | organizationno—▸ resource
securityAssessmentSchedule · component propertyenumweeklynoweeklyinherited
sqlFirewall · component propertyboolean—nofalseinherited
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "data-safe", component: "oci-data-safe" }
Other Policy engine products · 56
Cloud Configalibaba-cloud-configalibabacloudpolicy-engineData Security Centeralibaba-data-security-centeralibabacloudpolicy-engineAmazon CodeGuru Revieweraws-codeguru-reviewerawspolicy-engineAWS Configaws-configawspolicy-engineAWS Control Toweraws-control-towerawspolicy-engineIAM Access Analyzeraws-iam-access-analyzerawspolicy-engineAWS Lake Formationaws-lake-formationawspolicy-engineAWS License Manageraws-license-managerawspolicy-engineAWS Organizationsaws-organizationsawspolicy-engineAWS Resource Access Manageraws-ramawspolicy-engineAmazon Verified Permissionsaws-verified-permissionsawspolicy-engineMicrosoft Entra Conditional Accessazure-conditional-accessazurepolicy-engineAzure Policyazure-policyazurepolicy-engineMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementazurepolicy-engineCloudflare Data Loss Preventioncloudflare-dlpcloudflarepolicy-engineCalypsoAIcalypsoaipolicy-engineCerboscerbospolicy-engineOPA Gatekeepergatekeeperpolicy-engineGuardrails AIguardrails-aipolicy-engineHiddenLayer AI Security Platformhiddenlayerpolicy-engineKubeArmorkubearmorpolicy-engineKubewardenkubewardenpolicy-engineKyvernokyvernopolicy-engineLakera Guardlakera-guardpolicy-engineLLM Guardllm-guardpolicy-engineNeMo Guardrailsnemo-guardrailspolicy-engineOpen Policy Agentopapolicy-enginePermit.iopermit-iopolicy-engineGeneric policy enginepolicy-enginepolicy-enginePrompt Securityprompt-securitypolicy-engineProtect AIprotect-aipolicy-engineRebuffrebuffpolicy-engineRobust Intelligencerobust-intelligencepolicy-engineSonarQube Serversonarqubepolicy-engineDigitalOcean CSPMdigitalocean-cspmdigitaloceanpolicy-engineAccess Context Managergoogle-access-context-managergcppolicy-engineAssured Workloadsgoogle-assured-workloadsgcppolicy-engineBinary Authorizationgoogle-binary-authorizationgcppolicy-engineIdentity and Access Managementgoogle-cloud-iamgcppolicy-engineFirebase App Checkgoogle-firebase-app-checkgcppolicy-engine
and 16 more → Policy engine page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Oracle Data Safe target: security posture, user risk, sensitive data discovery, masking, activity
# auditing, alerts and SQL Firewall for a registered database. "Oracle Data Safe Overview" and
# "Manage Security Assessments": a dedicated Data Safe database per tenancy and region, security
# assessments scheduled weekly on their own, and audit data kept online for one month at a minimum.
schemaVersion: "1"
type: "component"
id: "oci-data-safe"
kind: "policy-engine"
provider: "oci"
docs: "https://docs.oracle.com/en-us/iaas/data-safe/doc/oracle-data-safe-overview.html"
defaults:
  managed: true
  effect: "audit"
  scope: "resource"
  remediation: false
properties:
  securityAssessmentSchedule:
    type: "enum"
    values: ["weekly"]
    default: "weekly"
  onlineAuditRetentionMonths:
    type: "integer"
    default: 1
  activityAuditing:
    type: "boolean"
    default: false
  sqlFirewall:
    type: "boolean"
    default: false
  dataMasking:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/oci-data-safe.md