Pull request for Get Started with Oracle Data Safe Fundamentals (#163)

* Updates from Michaels feedback * Cloud World updates * Cloud World 2022 * Updates after Bettina's review for cloud world 2022 * Data Masking role Moved Data Masking role grant to Data Masking lab * Message about filter * Fixes after dev review * fixes based on Dev feedback * Tiger Team training update Went through all labs and updated most screenshots and updated instructions where needed. Also added a few new features. * Updates for Tiger Team * Update prepare-environment.md Updated this file to work for both workshops * Files for an advanced workshop for tiger team training * Update api-copy-audit-data.md Based on Anna's feedback * Update api-copy-audit-data.md Fixed up the copy of code * Update api-schedule-audit-data-copy.md * Update api-schedule-audit-data-copy.md * Update api-schedule-audit-data-copy.md * With errors * Update api-copy-audit-data.md * Update api-copy-audit-data.md * Update api-copy-audit-data.md Removed installing the SDK because it's already installed on Cloud Shell. An updated java file is required. * Update api-copy-audit-data.md * Updated * Updates * Update manifest.json * Update introduction-adv.md * Update cli.md * Update api-copy-audit-data.md * Update cli.md * Update cli.md * Updated based on Bettina's feedback * Updated screenshots for new OCI interface * update * updates for 2nd workshop * Q/A testing updates * lint checker Q/A updates * updates for integration workshop * Testing * update for timings * Added Proceed to next lab * Removed Data Safe enablement step April 11th, Data Safe is enabled during target registration behind the scenes. * OCI menu change * Added folders for Cloud World 2023 * OCW2023 Initial changes for Bettina * Updated steps for Oracle Cloud World files Note: Graphics still need to be updated. * Update manifest.json * Added graphics and did a run through * Updates after dry run on June 7 * Updates for quarterly Q/A * Autonomous Database Serverless name change * Updates for Cloud World * updated title of HOL * Added videos * Updates for new features in Data Safe All labs are updated * Update assess-database-users.md mentioned schema access * Updated workshop with current interface and streamlined labs 3 and 4 * Updated capitalization, dates, and minor things * Updated capitilizations * temporary fix added for java example file * Updated before go-live * updated graphics to deal with Notifications tab * updated SQL script * fix
oracle-livelabs · Feb 12, 2024 · caaa539 · caaa539
1 parent 34cca9c
commit caaa539
Show file tree

Hide file tree

Showing 153 changed files with 2,086 additions and 1,537 deletions.
diff --git a/data-safe/api-copy-audit-data/api-copy-audit-data-archive1.md b/data-safe/api-copy-audit-data/api-copy-audit-data-archive1.md
diff --git a/data-safe/api-copy-audit-data/api-copy-audit-data.md b/data-safe/api-copy-audit-data/api-copy-audit-data.md
diff --git a/data-safe/api-schedule-audit-data-copy/api-schedule-audit-data-copy.md b/data-safe/api-schedule-audit-data-copy/api-schedule-audit-data-copy.md
diff --git a/data-safe/api-schedule-audit-data-copy/api-schedule-audit-data-copy_archive1.md b/data-safe/api-schedule-audit-data-copy/api-schedule-audit-data-copy_archive1.md
diff --git a/data-safe/api-schedule-audit-data-copy/images/audit-records-objects.png b/data-safe/api-schedule-audit-data-copy/images/audit-records-objects.png
diff --git a/data-safe/assess-database-configurations/assess-database-configurations.md b/data-safe/assess-database-configurations/assess-database-configurations.md
diff --git a/data-safe/assess-database-configurations/images/adjust-risk-icon.png b/data-safe/assess-database-configurations/images/adjust-risk-icon.png
diff --git a/data-safe/assess-database-configurations/images/deferred-risk-finding.png b/data-safe/assess-database-configurations/images/deferred-risk-finding.png
diff --git a/.../assess-database-configurations/images/latest-sa-assessment-details-section.png b/.../assess-database-configurations/images/latest-sa-assessment-details-section.png
diff --git a/.../assess-database-configurations/images/latest-sa-assessment-information-tab.png b/.../assess-database-configurations/images/latest-sa-assessment-information-tab.png
diff --git a/...safe/assess-database-configurations/images/latest-sa-assessment-summary-tab.png b/...safe/assess-database-configurations/images/latest-sa-assessment-summary-tab.png
diff --git a/data-safe/assess-database-configurations/images/rename-latest-sa-assessment.png b/data-safe/assess-database-configurations/images/rename-latest-sa-assessment.png
diff --git a/data-safe/assess-database-configurations/images/sa-assessed-on-right-now.png b/data-safe/assess-database-configurations/images/sa-assessed-on-right-now.png
diff --git a/data-safe/assess-database-configurations/images/sa-comparison-report-bottom2.png b/data-safe/assess-database-configurations/images/sa-comparison-report-bottom2.png
diff --git a/data-safe/assess-database-configurations/images/sa-comparison-report-top2.png b/data-safe/assess-database-configurations/images/sa-comparison-report-top2.png
diff --git a/data-safe/assess-database-configurations/images/sa-filters.png b/data-safe/assess-database-configurations/images/sa-filters.png
diff --git a/data-safe/assess-database-configurations/images/sa-refresh-now-panel.png b/data-safe/assess-database-configurations/images/sa-refresh-now-panel.png
diff --git a/data-safe/assess-database-configurations/images/sa-risk-summary-tab.png b/data-safe/assess-database-configurations/images/sa-risk-summary-tab.png
diff --git a/data-safe/assess-database-configurations/images/sa-target-summary-tab.png b/data-safe/assess-database-configurations/images/sa-target-summary-tab.png
diff --git a/data-safe/assess-database-configurations/images/sa_overview_charts.png b/data-safe/assess-database-configurations/images/sa_overview_charts.png
diff --git a/data-safe/assess-database-configurations/images/sa_risklevel_risksbycategory.png b/data-safe/assess-database-configurations/images/sa_risklevel_risksbycategory.png
diff --git a/...e/assess-database-configurations/images/system-privileges-granted-to-public.png b/...e/assess-database-configurations/images/system-privileges-granted-to-public.png
diff --git a/data-safe/assess-database-configurations/images/top-5-common-controls.png b/data-safe/assess-database-configurations/images/top-5-common-controls.png
diff --git a/data-safe/assess-database-configurations/images/top-5-security-controls.png b/data-safe/assess-database-configurations/images/top-5-security-controls.png
diff --git a/...e/assess-database-configurations/images/transparent-data-encryption-finding.png b/...e/assess-database-configurations/images/transparent-data-encryption-finding.png
diff --git a/data-safe/assess-database-configurations/images/update-risk-for-finding.png b/data-safe/assess-database-configurations/images/update-risk-for-finding.png
diff --git a/data-safe/assess-database-users/assess-database-users.md b/data-safe/assess-database-users/assess-database-users.md
diff --git a/data-safe/assess-database-users/images/ua-EVIL_RICH-user-details.png b/data-safe/assess-database-users/images/ua-EVIL_RICH-user-details.png
diff --git a/data-safe/assess-database-users/images/ua-admin-user-audit-records.png b/data-safe/assess-database-users/images/ua-admin-user-audit-records.png
diff --git a/data-safe/assess-database-users/images/ua-all-activity-bottom.png b/data-safe/assess-database-users/images/ua-all-activity-bottom.png
diff --git a/data-safe/assess-database-users/images/ua-all-activity-top.png b/data-safe/assess-database-users/images/ua-all-activity-top.png
diff --git a/data-safe/assess-database-users/images/ua-assessment-information-tab.png b/data-safe/assess-database-users/images/ua-assessment-information-tab.png
diff --git a/data-safe/assess-database-users/images/ua-comparison-details-panel.png b/data-safe/assess-database-users/images/ua-comparison-details-panel.png
diff --git a/data-safe/assess-database-users/images/ua-comparison-report2.png b/data-safe/assess-database-users/images/ua-comparison-report2.png
diff --git a/data-safe/assess-database-users/images/ua-critical-risk-users-filter.png b/data-safe/assess-database-users/images/ua-critical-risk-users-filter.png
diff --git a/data-safe/assess-database-users/images/ua-dashboard-charts1.png b/data-safe/assess-database-users/images/ua-dashboard-charts1.png
diff --git a/data-safe/assess-database-users/images/ua-dashboard-charts2.png b/data-safe/assess-database-users/images/ua-dashboard-charts2.png
diff --git a/data-safe/assess-database-users/images/ua-latest-assessment-details.png b/data-safe/assess-database-users/images/ua-latest-assessment-details.png
diff --git a/data-safe/assess-database-users/images/ua-latest-charts1.png b/data-safe/assess-database-users/images/ua-latest-charts1.png
diff --git a/data-safe/assess-database-users/images/ua-latest-charts2.png b/data-safe/assess-database-users/images/ua-latest-charts2.png
diff --git a/data-safe/assess-database-users/images/ua-refresh-now-panel.png b/data-safe/assess-database-users/images/ua-refresh-now-panel.png
diff --git a/data-safe/assess-database-users/images/ua-risk-summary-tab.png b/data-safe/assess-database-users/images/ua-risk-summary-tab.png
diff --git a/data-safe/assess-database-users/images/ua-target-summary-tab.png b/data-safe/assess-database-users/images/ua-target-summary-tab.png
diff --git a/data-safe/audit-database-activity/audit-database-activity.md b/data-safe/audit-database-activity/audit-database-activity.md
diff --git a/...-database-activity/images/activity-auditing-dashboard-charts-afterprovision.png b/...-database-activity/images/activity-auditing-dashboard-charts-afterprovision.png
diff --git a/...e/audit-database-activity/images/activity-auditing-dashboard-charts-initial.png b/...e/audit-database-activity/images/activity-auditing-dashboard-charts-initial.png
diff --git a/...t-database-activity/images/activity-auditing-dashboard-table-afterprovision.png b/...t-database-activity/images/activity-auditing-dashboard-table-afterprovision.png
diff --git a/...dit-database-activity/images/activity-auditing-dashboard-target-summary-tab.png b/...dit-database-activity/images/activity-auditing-dashboard-target-summary-tab.png
diff --git a/data-safe/audit-database-activity/images/activity-auditing-events-summary-tab.png b/data-safe/audit-database-activity/images/activity-auditing-events-summary-tab.png
diff --git a/data-safe/audit-database-activity/images/alerts-dashboard-no-data.png b/data-safe/audit-database-activity/images/alerts-dashboard-no-data.png
diff --git a/data-safe/audit-database-activity/images/all-activity-report-pdf.png b/data-safe/audit-database-activity/images/all-activity-report-pdf.png
diff --git a/data-safe/audit-database-activity/images/all-activity-report.png b/data-safe/audit-database-activity/images/all-activity-report.png
diff --git a/data-safe/audit-database-activity/images/audit-event-table-expander.png b/data-safe/audit-database-activity/images/audit-event-table-expander.png
diff --git a/data-safe/audit-database-activity/images/audit-policies-details-page.png b/data-safe/audit-database-activity/images/audit-policies-details-page.png
diff --git a/data-safe/audit-database-activity/images/audit-policies-page.png b/data-safe/audit-database-activity/images/audit-policies-page.png
diff --git a/data-safe/audit-database-activity/images/audit-profile-details-page.png b/data-safe/audit-database-activity/images/audit-profile-details-page.png
diff --git a/data-safe/audit-database-activity/images/audit-profiles-page.png b/data-safe/audit-database-activity/images/audit-profiles-page.png
diff --git a/data-safe/audit-database-activity/images/audit-trail-details-page.png b/data-safe/audit-database-activity/images/audit-trail-details-page.png
diff --git a/data-safe/audit-database-activity/images/audit-trails-page.png b/data-safe/audit-database-activity/images/audit-trails-page.png
diff --git a/data-safe/audit-database-activity/images/available-in-target-database.png b/data-safe/audit-database-activity/images/available-in-target-database.png
diff --git a/data-safe/audit-database-activity/images/collection-state-idle.png b/data-safe/audit-database-activity/images/collection-state-idle.png
diff --git a/data-safe/audit-database-activity/images/create-custom-report-dialog-box.png b/data-safe/audit-database-activity/images/create-custom-report-dialog-box.png
diff --git a/data-safe/audit-database-activity/images/custom-audit-report3.png b/data-safe/audit-database-activity/images/custom-audit-report3.png
diff --git a/data-safe/audit-database-activity/images/custom-report-details.png b/data-safe/audit-database-activity/images/custom-report-details.png
diff --git a/data-safe/audit-database-activity/images/custom-report-w-schedule.png b/data-safe/audit-database-activity/images/custom-report-w-schedule.png
diff --git a/data-safe/audit-database-activity/images/enabled-policies.png b/data-safe/audit-database-activity/images/enabled-policies.png
diff --git a/data-safe/audit-database-activity/images/generate-pdf-custom-audit-report.png b/data-safe/audit-database-activity/images/generate-pdf-custom-audit-report.png
diff --git a/data-safe/audit-database-activity/images/history-custom-report.png b/data-safe/audit-database-activity/images/history-custom-report.png
diff --git a/data-safe/audit-database-activity/images/manage-report-schedule-panel.png b/data-safe/audit-database-activity/images/manage-report-schedule-panel.png
diff --git a/data-safe/audit-database-activity/images/provision-audit-policies-panel.png b/data-safe/audit-database-activity/images/provision-audit-policies-panel.png
diff --git a/data-safe/audit-database-activity/images/schema-changes-by-admin-page.png b/data-safe/audit-database-activity/images/schema-changes-by-admin-page.png
diff --git a/data-safe/audit-database-activity/images/start-audit-trail-dialog-box.png b/data-safe/audit-database-activity/images/start-audit-trail-dialog-box.png
diff --git a/data-safe/clean-up-environment/clean-up-environment-ocw.md b/data-safe/clean-up-environment/clean-up-environment-ocw.md
@@ -1,4 +1,4 @@
-# Clean Up Your Environment
+# Clean up your environment
 
 ## Introduction
 

diff --git a/data-safe/cli/cli.md b/data-safe/cli/cli.md
@@ -1,10 +1,12 @@
-# Download the Latest Security Assessment by using the Oracle Data Safe CLI
+# Download the latest security assessment by using the Oracle Data Safe CLI
+
+[comment]: <> (A policy is required to access Cloud Shell)
 
 ## Introduction
 
  You can use the command line interface (CLI) in Cloud Shell to perform tasks in Oracle Data Safe. Cloud Shell is a small virtual machine running a Linux shell and is accessible in your tenancy in the Oracle Cloud Infrastructure Console. It's ready and free to use in your tenancy (within monthly tenancy limits). If you want to perform complex tasks using the CLI, it's useful to create an SH script that contains all of your CLI commands. 
 
- In this lab, you use the CLI to refresh the latest Security Assessment report for your target database and download it to a directory on your Cloud Shell machine. Begin by familiarizing yourself with the command line interface (CLI) documentation for Oracle Data Safe.
+ In this lab, you use the CLI to refresh the latest Security Assessment report for your target database and download the report to a directory on your Cloud Shell machine. Begin by familiarizing yourself with the command line interface (CLI) documentation for Oracle Data Safe.
 
 Estimated Lab Time: 20 minutes
 
@@ -65,10 +67,13 @@ This lab assumes you have:
 
 1. To open Cloud Shell, in the upper-right corner of the Oracle Cloud Infrastructure Console, click the **Developer tools** icon, and then select **Cloud Shell**.
 
-    When you first open Cloud Shell, your current directory is your home directory; for example, `/home/jody_glove`. For this lab, we can work in the home directory (`~/`).
+2. If prompted to run a tutorial, enter **N** to skip the tutorial.
+
+   Your current directory is your home directory; for example, `/home/jody_glove`. For this lab, we can work in the home directory (`~/`).
 
+3. To verify your current directory, enter `pwd`.
 
-2. (Optional) If you use Cloud Shell often and want to start fresh, you can reset it. The following command erases all the data in your `$HOME` directory on your Cloud Shell machine and resets the `$HOME/.bashrc`, `$HOME/.bash_profile`, `$HOME/.bash_logout`, and `$HOME/.emacs` files back to their default values. Enter **y** at the prompt to confirm.
+4. (Optional) If you use Cloud Shell often and want to start fresh, you can reset it. The following command erases all the data in your `$HOME` directory on your Cloud Shell machine and resets the `$HOME/.bashrc`, `$HOME/.bash_profile`, `$HOME/.bash_logout`, and `$HOME/.emacs` files back to their default values. Enter **y** at the prompt to confirm.
 
     ```bash
     $ <copy>csreset --all</copy>
@@ -89,7 +94,7 @@ Identify the commands and values that are required for the SH script and test ea
 
 2. Create a variable that defines your Oracle Data Safe target database OCID (not your Autonomous Database OCID!). 
 
-    To do this, first find your target database OCID: From the navigation menu, select **Oracle Database**, and then **Data Safe - Database Security**. Under **Data Safe** on the left, click **Target Databases**. Under **List Scope** on the left, select your compartment. On the right, click the name of your target database. On the **Target Database Details** tab, click **Copy** next to **OCID**. In Cloud Shell, enter the following command, replacing `your-target-database-ocid` with your own OCID.
+    To do this, first find your target database OCID: From the navigation menu, select **Oracle Database**, and then **Data Safe - Database Security**. Under **Data Safe** on the left, click **Target databases**. Under **List scope** on the left, select your compartment. On the right, click the name of your target database. On the **Target database information** tab, click **Copy** next to **OCID**. In Cloud Shell, enter the following command, replacing `your-target-database-ocid` with your own OCID.
 
     ```text
     $ <copy>export target_id=your-target-database-ocid</copy>
@@ -119,15 +124,15 @@ Identify the commands and values that are required for the SH script and test ea
     $ <copy>security_assessment_id=$(oci data-safe security-assessment create --compartment-id $compartment_id --target-id $target_id --query data.id --raw-output)</copy>
     ```
 
-     Notice how we are using the `security-assessment create` CLI command with the `--query data.id` and `--raw-output` parameters. If you need to obtain metadata about a resource, you can learn which metadata values are available by including the `--query data` and `--raw-output` parameters. For example, if the above statement used `--query data` instead of `--query data.id`, the output value would include all possible key-value pairs.
+     Notice how we are using the `security-assessment create` CLI command with the `--query data.id` and `--raw-output` parameters. If you need to obtain metadata about a resource, you can learn which metadata values are available by including the `--query data` and `--raw-output` parameters. For example, if the above statement used `--query data` instead of `--query data.id`, the output value would include all possible key-value pairs:
 
      ```json
      <copy>{"compartment-id": "ocid1.compartment.oc1...", "defined-tags": { "Oracle-Tags": { "CreatedBy": "jody.glove..", "CreatedOn": "2023-01-30T20:40:53.671Z" } }, "description": null, "display-name": "SA_1675111253797", "freeform-tags": {}, "id": "ocid1.datasafesecurityassessment.oc1...", "ignored-assessment-ids": null, "ignored-targets": null, "is-baseline": false, "is-deviated-from-baseline": null, "last-compared-baseline-id": null, "lifecycle-details": null, "lifecycle-state": "CREATING", "link": null, "schedule": null, "schedule-security-assessment-id": null, "statistics": null, "system-tags": {}, "target-ids": [ "ocid1.datasafetargetdatabase.oc1..." ], "target-version": null, "time-created": "2023-01-30T20:40:53.797000+00:00", "time-updated": "2023-01-30T20:40:53.797000+00:00", "triggered-by": "USER", "type": "SAVED" }</copy>
       ```
 
 6. Verify that the security assessment is created in Oracle Data Safe. 
 
-    To do this, from the navigation menu, select **Oracle Database**, and then **Data Safe - Database Security**. Under **Data Safe** on the left, click **Security Assessment**. Click the **Target Summary** tab, locate the line that has your target database, and click **View Report**. At the top of the latest security assessment page, click **View History**. Make sure that your compartment is selected. Find the new security assessment for your target database that was generated by the CLI command in the previous step.
+    To do this, from the navigation menu, select **Oracle Database**, and then **Data Safe - Database Security**. Under **Data Safe** on the left, click **Security assessment**. Click the **Target summary** tab, locate the line that has your target database, and click **View report**. At the top of the latest security assessment page, click **View history**. Make sure that your compartment is selected. Find the new security assessment for your target database that was generated by the CLI command in the previous step.
     
     You should have at least two security assessments. The first one was automatically created by Oracle Data Safe when you registered your target database. The second one is the one you just created via the command line. If the second one isn't listed, you may need to wait a little longer.
 
@@ -218,13 +223,13 @@ When you run the SH file, the latest security assessment is downloaded to your C
     ```
 4. In the upper-right corner of Cloud Shell, click the **Cloud Shell Menu** icon (cog wheel), and select **Download**.
 
-    A **Download File** dialog box is displayed.
+    A **Download file** dialog box is displayed.
 
 5. Enter the name of your PDF file, and then click **Download**.
 
-    The file is downloaded to the browser. 
+    The file is downloaded to the browser.
 
-6. Open the PDF file and review the assessment report. Close the browser tab when you're finished.
+6. Open the PDF file, if needed, and review the assessment report. Close the browser tab when you're finished.
 
 7. Close Cloud Shell and click **Exit** to confirm.
 
@@ -239,4 +244,4 @@ You may now **proceed to the next lab**.
 ## Acknowledgements
 - **Author** - Jody Glover, Consulting User Assistance Developer, Database 
 - **Consultants** - Bettina Schaeumer
-- **Last Updated By/Date** - Jody Glover, April 11, 2023
+- **Last Updated By/Date** - Jody Glover, February 6, 2024