Giter Club home page Giter Club logo

steampipe-plugin-oci's Introduction

image

Oracle Cloud Plugin for Steampipe

Use SQL to query infrastructure including servers, networks, identity and more from Oracle Cloud.

Quick start

Install the plugin with Steampipe:

steampipe plugin install oci

Run a query:

select name, id, is_mfa_activated from oci_identity_user

Engines

This plugin is available for the following engines:

Engine Description
Steampipe The Steampipe CLI exposes APIs and services as a high-performance relational database, giving you the ability to write SQL-based queries to explore dynamic data. Mods extend Steampipe's capabilities with dashboards, reports, and controls built with simple HCL. The Steampipe CLI is a turnkey solution that includes its own Postgres database, plugin management, and mod support.
Postgres FDW Steampipe Postgres FDWs are native Postgres Foreign Data Wrappers that translate APIs to foreign tables. Unlike Steampipe CLI, which ships with its own Postgres server instance, the Steampipe Postgres FDWs can be installed in any supported Postgres database version.
SQLite Extension Steampipe SQLite Extensions provide SQLite virtual tables that translate your queries into API calls, transparently fetching information from your API or service as you request it.
Export Steampipe Plugin Exporters provide a flexible mechanism for exporting information from cloud services and APIs. Each exporter is a stand-alone binary that allows you to extract data using Steampipe plugins without a database.
Turbot Pipes Turbot Pipes is the only intelligence, automation & security platform built specifically for DevOps. Pipes provide hosted Steampipe database instances, shared dashboards, snapshots, and more.

Developing

Prerequisites:

Clone:

git clone https://github.com/turbot/steampipe-plugin-oci.git
cd steampipe-plugin-oci

Build, which automatically installs the new version to your ~/.steampipe/plugins directory:

make

Configure the plugin:

cp config/* ~/.steampipe/config
vi ~/.steampipe/config/oci.spc

Try it!

steampipe query
> .inspect oci

Further reading:

Open Source & Contributing

This repository is published under the Apache 2.0 (source code) and CC BY-NC-ND (docs) licenses. Please see our code of conduct. We look forward to collaborating with you!

Steampipe is a product produced from this open source software, exclusively by Turbot HQ, Inc. It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our Open Source FAQ.

Get Involved

Join #steampipe on Slack →

Want to help but don't know where to start? Pick up one of the help wanted issues:

steampipe-plugin-oci's People

Contributors

anisadas avatar anykeynl avatar bigdatasourav avatar c0d3r-arnab avatar cbruno10 avatar dboeke avatar dependabot[bot] avatar karanpopat avatar khushboo9024 avatar lalitlab avatar lucasjellema avatar madhushreeray30 avatar misraved avatar parthai avatar priyanka585464 avatar rajeshbal65 avatar rajlearner17 avatar scotti-fletcher avatar subhajit97 avatar subham9418 avatar visiit avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Forkers

syllogy danielwoodz anykeynl scotti-fletcher lucasjellema

steampipe-plugin-oci's Issues

Add table oci_logging_log

Is your feature request related to a problem? Please describe.
We need to know if for all subnets in VCN is enabled with flow log or not. Part of CIS 3.14

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Add table oci_core_route_table

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Add table oci_identity_group

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Extension to oci_objectstorage_bucket to query bucket logging status.

Is your feature request related to a problem? Please describe.
In current table, there is no option to query the logging status of the bucket as required for CIS - 3.17 Ensure write level Object Storage logging is enabled for all buckets.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
image

Add table oci_identity_auth_token

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Add support to query the user's Customer Secret Keys creation time.

Is your feature request related to a problem? Please describe.
Current table for user i.e. oci_identity_user does not support to query the creation date of the customer key. We need to satisfy one of the OCI CIS 1.1.0 requirement i.e. 1.9 Ensure user customer secret keys rotate within 90 days or less. Part of it, we may need to know the creation date to calculate 90 days period.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Add table oci_cloud_guard_detector_recipe

References
We need ensure Cloud Guard is enabled in the root compartment of the tenancy as per CIS requirements.

3.15 Ensure Cloud Guard is enabled in the root compartment of the tenancy

Add table oci_core_security_list

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Add support to query password policy configurations.

Is your feature request related to a problem? Please describe.
For the time being with existing table, some of these below CIS requirements are not addressed.

1.5 Ensure IAM password policy expires passwords within 365 days
1.6 Ensure IAM password policy prevents password reuse
1.7 Ensure MFA is enabled for all users with a console password
1.8 Ensure user API keys rotate within 90 days or less
1.9 Ensure user customer secret keys rotate within 90 days or less
1.10 Ensure user auth tokens rotate within 90 days or less

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
image

image

Finding way to join the user data with admin policy to conclude user role.

Is your feature request related to a problem? Please describe.
In one of CIS requirement we have to find [CIS 1.11] Ensure API keys are not created for tenancy administrator users . However in the current tables, its hard to tie back the admin policies associated to understand of the user as Admin privileges or not.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
E.g. how we differentiate the Admin group based on the policy statements
image

Add support to query the user's Auth Tokens creation time.

Is your feature request related to a problem? Please describe.
Current table for user i.e. oci_identity_user does not support to query the creation date of the customer key. We need to satisfy one of the OCI CIS 1.1.0 requirement i.e. [1.10] Ensure user auth tokens rotate within 90 days or less. Part of it, we may need to know the creation date to calculate 90 days period with current date comparision.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.
image

Add support to get more data for the storage bucket on type of CMK.

Is your feature request related to a problem? Please describe.
We need to find the bucket encryption status to make sure Customer Managed Key (CMK) is used.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
image

Add table oci_core_subnet

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Add table oci_identity_policy

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Add table oci_identity_dynamic_group

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Add table oci_objectstorage_bucket

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Add table oci_kms_vault

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Though it may have more functionalities to query, however one of the CIS requirement that, customer created Customer Managed Key (CMK) is rotated at least annually (CIS 3.16)

image

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.