-
Notifications
You must be signed in to change notification settings - Fork 35
Expand file tree
/
Copy pathoneoe_security_cis2.json
More file actions
159 lines (140 loc) · 8.5 KB
/
Copy pathoneoe_security_cis2.json
File metadata and controls
159 lines (140 loc) · 8.5 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
{
"cloud_guard_configuration": {
"compartment_id" : "TENANCY-ROOT",
"reporting_region" : "eu-frankfurt-1",
"self_manage_resources" : false,
"targets": {
"CG-TGT-ROOT-KEY": {
"name" : "cg-tgt-root",
"compartment_id" : "TENANCY-ROOT",
"resource_id" : "TENANCY-ROOT",
"resource_type" : "COMPARTMENT",
"use_cloned_recipes" : true
}
}
},
"scanning_configuration": {
"default_compartment_id" : "CMP-LZ-SECURITY-KEY",
"host_recipes": {
"VSS-RCPH-LZ-KEY": {
"name" : "vss-rcph-lz",
"port_scan_level" : "STANDARD",
"agent_settings": {
"cis_benchmark_scan_level" : "STRICT",
"scan_level" : "STANDARD",
"vendor" : "OCI"
},
"file_scan_settings": {
"enable" : true,
"folders_to_scan" : ["/"],
"operating_system" : "LINUX",
"scan_recurrence" : "FREQ=WEEKLY;INTERVAL=2;WKST=SU"
},
"schedule_settings": {
"type" : "WEEKLY",
"day_of_week" : "SUNDAY"
}
}
},
"host_targets": {
"VSS-TGTH-LZ-KEY": {
"name" : "vss-tgth-lz",
"host_recipe_id" : "VSS-RCPH-LZ-KEY",
"target_compartment_id" : "CMP-LANDINGZONE-KEY"
}
}
},
"security_zones_configuration": {
"reporting_region" : "eu-frankfurt-1",
"tenancy_ocid" : "TENANCY-ROOT",
"recipes": {
"SZ-RCP-LZ-01-CIS-L2-KEY": {
"name" : "sz-rcp-lz-01-cis-l2",
"description" : "Recipe 01 CIS Level 2",
"compartment_id" : "CMP-LZ-SECURITY-KEY",
"cis_level" : "2"
},
"SZ-RCP-LZ-02-SHARED-NETWORK-KEY": {
"name" : "sz-rcp-lz-02-shared-network",
"description" : "Recipe 02 Shared Network",
"compartment_id" : "CMP-LZ-SECURITY-KEY",
"cis_level" : "2",
"security_policies_ocids": [
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaavolswrbfqy6qn2qe7zek2dumml6pbmyzv47q6jfwdatrywmqumba",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaayxn5ccbavcx5w35uoozguju5zlovvtbnuvnrduxpdp3vsho33lba",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaazlzn66zeazf5npw46qah3wlqpfrugv7w4tjbomit2msr43stidga",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaaw6v2nz4unovq3joqk6pguxpaqriws2vzd7gvpldgai47tl72wseq"
]
},
"SZ-RCP-LZ-03-PROD-ENVIRONMENT-KEY": {
"name" : "sz-rcp-lz-03-prod-environment",
"description" : "Recipe 03 Prod Environment",
"compartment_id" : "CMP-LZ-SECURITY-KEY",
"cis_level" : "2",
"security_policies_ocids": [
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaavolswrbfqy6qn2qe7zek2dumml6pbmyzv47q6jfwdatrywmqumba",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaayxn5ccbavcx5w35uoozguju5zlovvtbnuvnrduxpdp3vsho33lba",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaazlzn66zeazf5npw46qah3wlqpfrugv7w4tjbomit2msr43stidga",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaaw6v2nz4unovq3joqk6pguxpaqriws2vzd7gvpldgai47tl72wseq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaa6j7b5bf3ytsno7a45r7xupqt2q342q2hlecnf7fgqpkq67stakda",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaabs6kboflsfan2lihfnodhbeb75r4nxiolhlobvj6vqclx6j5yyha",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaak5wxfr2r6kxmtd6bq6hqhyywfkj6pcnl74g3iui6qnlq7rof4ezq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaamewv6k5a7cik6ds6m6bsijwkiixpfzgsqzvrjlns5pxg6lslrzgq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaaegi6cweu5jqwipqhj5quz4pebfd76djed4lfogslzuawqavkrsjq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaawol5fz6qkrkxm5ui7n3car44e5wbs54thnku2hjxwaedi5ee6htq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaaol3pxbbikegih24c7l4um7wqeeun2dpkvgm3izz5syf755xfscgq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaajscm24dhll5wk65k6q4mmkopiykpqrumtururitjaxk3j4ibe3ua",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaaxou4266jlusvklor34czqvloa64k5dsok5cejug2bxi2jvqy32zq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaaqlpaf5tc3xfqdzdw2rtx7hk4ifywzml3eh3upspeh4s6x4epaskq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaah3k66efqfgo5ccjgvtkwbfpzj5yjajmw7vt5eub6ma4jp6su55zq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaa2lfkaypfwyykhbz65zlgc4lvypl64axzhnsqmegllgiyxbweruya",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaay32fadjsdgsytdpyn4busugqftko2shttseljqbagapngiatxepa",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaa544n6cyqrq6tato53ohh7vcz523af5dtuz6x54efhs6mb7bcw54a",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaauvfkentmqda6mq7lxekkstjpe7kwgmrpkadzt7krhrt66tliourq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaa6oycc62uuvpi6oddkzku6x2vzhraud7ynkbdeols5i4khwroklva",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaa5qtljtbaeacnhfhr7hfs5nd3jp6jin6grbdgf6izkf4ukxmatjpa",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaaf45c2imtiuyxbccuwrh3s7is5lokpx5ksr4heu46c6mz6k35dsqa",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaauah5cz3vxzpdvw4uz32hcgcmhogvuhacgyc7z3al42tfjey46eea",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaauhuzsidaju3mwy3llsetvm3dlc6ftel65ielfu7h4hg6q2cfsrxa",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaawebiliesbgzdguac5m5u332oj66afaab6ruovydpsdoexloguweq",
"ocid1.securityzonessecuritypolicy.oc1..aaaaaaaawec56szedvf6hogbbnu7cxywm4xkmta53wuo7lenceiqyr4bx5hq"
]
}
},
"security_zones": {
"SZ-TGT-LZ-CIS-L2-KEY": {
"name" : "sz-tgt-lz-cis-l2",
"compartment_id" : "CMP-LANDINGZONE-KEY",
"recipe_key" : "SZ-RCP-LZ-01-CIS-L2-KEY"
},
"SZ-TGT-LZ-SHARED-NETWORK-KEY": {
"name" : "sz-tgt-lz-shared-network",
"compartment_id" : "CMP-LZ-NETWORK-KEY",
"recipe_key" : "SZ-RCP-LZ-02-SHARED-NETWORK-KEY"
},
"SZ-TGT-LZ-PROD-ENVIRONMENT-KEY": {
"name" : "sz-tgt-lz-prod-environment",
"compartment_id" : "CMP-LZ-PROD-KEY",
"recipe_key" : "SZ-RCP-LZ-03-PROD-ENVIRONMENT-KEY"
}
}
},
"vaults_configuration": {
"default_compartment_id" : "CMP-LZ-SECURITY-KEY",
"keys": {
"KEY-LZ-SHARED-OSS-AUDIT-BKT-KEY": {
"name" : "key-lz-shared-oss-audit-bkt",
"group_grantees" : ["grp-lz-security-admin"],
"protection_mode" : "SOFTWARE",
"service_grantees" : ["objectstorage-eu-frankfurt-1"],
"vault_key" : "VLT-LZ-SHARED-SECURITY-KEY",
"versions" : ["1", "2"]
}
},
"vaults": {
"VLT-LZ-SHARED-SECURITY-KEY": {
"name" : "vlt-lz-shared-security"
}
}
}
}