Skip to content

Commit

Permalink
Pull request for Get Started with Oracle Data Safe Fundamentals (#282)
Browse files Browse the repository at this point in the history
* Updates from Michaels feedback

* Cloud World updates

* Cloud World 2022

* Updates after Bettina's review

for cloud world 2022

* Data Masking role

Moved Data Masking role grant to Data Masking lab

* Message about filter

* Fixes after dev review

* fixes based on Dev feedback

* Tiger Team training update

Went through all labs and updated most screenshots and updated instructions where needed. Also added a few new features.

* Updates for Tiger Team

* Update prepare-environment.md

Updated this file to work for both workshops

* Files for an advanced workshop for tiger team training

* Update api-copy-audit-data.md

Based on Anna's feedback

* Update api-copy-audit-data.md

Fixed up the copy of code

* Update api-schedule-audit-data-copy.md

* Update api-schedule-audit-data-copy.md

* Update api-schedule-audit-data-copy.md

* With errors

* Update api-copy-audit-data.md

* Update api-copy-audit-data.md

* Update api-copy-audit-data.md

Removed installing the SDK because it's already installed on Cloud Shell. An updated java file is required.

* Update api-copy-audit-data.md

* Updated

* Updates

* Update manifest.json

* Update introduction-adv.md

* Update cli.md

* Update api-copy-audit-data.md

* Update cli.md

* Update cli.md

* Updated based on Bettina's feedback

* Updated screenshots for new OCI interface

* update

* updates for 2nd workshop

* Q/A testing updates

* lint checker Q/A updates

* updates for integration workshop

* Testing

* update for timings

* Added Proceed to next lab

* Removed Data Safe enablement step

April 11th, Data Safe is enabled during target registration behind the scenes.

* OCI menu change

* Added folders for Cloud World 2023

* OCW2023

Initial changes for Bettina

* Updated steps for Oracle Cloud World files

Note: Graphics still need to be updated.

* Update manifest.json

* Added graphics and did a run through

* Updates after dry run on June 7

* Updates for quarterly Q/A

* Autonomous Database Serverless name change

* Updates for Cloud World

* updated title of HOL

* Added videos

* Updates for new features in Data Safe

All labs are updated

* Update assess-database-users.md

mentioned schema access

* Updated workshop with current interface and streamlined labs 3 and 4

* Updated capitalization, dates, and minor things

* Updated capitilizations

* temporary fix added for java example file

* Updated before go-live

* updated graphics to deal with Notifications tab

* updated SQL script

* fix

* Fixed brackets on permissions

* sql firewall

* sql firewall

* sql firewall

* sql firewall

* sql firewall revamp of labs

* Fixing error in column name

COUNTRY_ID should be COUNTRY_ABBREV

* Updates for Database Actions

updated a few screenshots

* ai

* Updates for OpenWorld2024

* OpenWorld update

* CloudWorld updates

* Update access-environment-ocw-sandbox.md

* new environment updates

* New environment updates

* HOL updates

Blurred compartment names

* Fixed links

filed links

* Updates after Data Discovery and Data Masking new features

Updates apply to Fundamentals workshop and HOL

* Updates for HOL

defer risk security assessment

* Updates for Cloud World and sandbox changes

Updates for Cloud World and sandbox changes

* activity auditing wizard

Activity auditing and alerts combined

* Activity Auditing wizard

Updates after feedback from Bettina

* Updates after Cloud World

changes to most labs

* Activity Auditing wizard updates

updated screenshots and tested for error

* ua and sa updates

ua and sa updates and final tests with activity auditing wizard

* removed sql firewall files

so that we can publish activity auditing changes without any more delays

* removing compartment info

* SQL firewall lab additions

* sql firewall updates after 2nd test

* sql firewall lab update

* updated the SQL load script

* update sql firewall steps

* update sql firewall

* update for sql firewall

* sql firewall additions

* Updates after testing with regular 23ai ATP

All labs work as expected without errors.
If using 23ai Developer version, Data Masking, Activity Auditing, and SQL Firewall labs do not work.

* Updates for 23ai and SQL Firewall

* added acknowledgement

This lab is not in use at the moment

* Fixes after tiger team training

* Updates after testing
  • Loading branch information
joglover authored Dec 18, 2024
1 parent 94846b9 commit 13f75bb
Show file tree
Hide file tree
Showing 2 changed files with 10 additions and 10 deletions.
Binary file added data-safe/sqlfw/images/two-violations.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
20 changes: 10 additions & 10 deletions data-safe/sqlfw/sqlfw.md
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,6 @@ Perform this task only if you are working in your own tenancy. If you are using
</copy>
```
18. On the worksheet, enter the following, and then click the **Run Statement** button:
```text
Expand Down Expand Up @@ -183,17 +182,18 @@ Perform this task only if you are working in your own tenancy. If you are using
The SQL statements that you collected earlier are listed.
```text
<copy>SELECT * FROM (SELECT Q_.*,ROW_NUMBER () OVER (ORDER BY :"SYS_B_0") RN___ FROM (SELECT FIRST_NAME,LAST_NAME,EMPLOYEE_ID FROM HCM1.EMPLOYEES) Q_) WHERE RN___ BETWEEN :1 AND :2
SELECT * FROM (SELECT Q_.*,ROW_NUMBER () OVER (ORDER BY :"SYS_B_0") RN___ FROM (SELECT FIRST_NAME,LAST_NAME,EMPLOYEE_ID FROM HCM1.EMPLOYEES) Q_) WHERE RN___ BETWEEN :1 AND :2
SELECT * FROM (SELECT Q_.*,ROW_NUMBER () OVER (ORDER BY :"SYS_B_0") RN___ FROM (SELECT LOCATION_ID,STREET_ADDRESS,CITY FROM HCM1.LOCATIONS ORDER BY LOCATION_ID) Q_) WHERE RN___ BETWEEN :1 AND :2
SELECT * FROM (SELECT Q_.*,ROW_NUMBER () OVER (ORDER BY :"SYS_B_0") RN___ FROM (SELECT LOCATION_ID,CITY FROM HCM1.LOCATIONS WHERE LOCATION_ID=:"SYS_B_1") Q_) WHERE RN___ BETWEEN :1 AND :2
</copy>
```
## Task 5: Test the SQL Firewall policy
When you run the SQL statements in this task, use the **Run Statement** button in Database Actions because that is how you previously ran the queries when you created the SQL collection. If you use the **Run Script** button instead, SQL Firewall will block the results.
1. Return to Database Actions as `APP_USER` and clear the worksheet.
2. Try running one of the SQL statements on the allow-list, for example:
Expand All @@ -203,7 +203,7 @@ Perform this task only if you are working in your own tenancy. If you are using
</copy>
```
The query should return data.
The query should return data.
3. Clear the worksheet and try running a SQL statement that isn't on the allow-list, for example:
Expand Down Expand Up @@ -234,20 +234,20 @@ Perform this task only if you are working in your own tenancy. If you are using
## Task 6: Add a SQL statement from the violation log to the allow-list
1. Return to the **SQL Firewall | Oracle Cloud Infrastructure** tab.
1. Return to the **SQL Firewall | Oracle Cloud Infrastructure** tab. You may need to wait a couple of minutes for the violations to show up.
2. Under **Unique allowed SQL statements**, click **Add from violations**.
The **Add from violations** page is displayed.
The **Add from violations** page is displayed showing you Autonomous Database SQL queries.
![Add from violations page](images/two-violations.png "Add from violations page")
3. Expand the violations and review.
4. Select the check box for the third SQL violation: `SELECT * FROM HCM1.EMPLOYEES`.
4. Select the check box for the second SQL violation: `SELECT * FROM HCM1.EMPLOYEES`.
5. Click **Add violations**.
![Add from violations page](images/add-from-violations.png "Add from violations page")
You are returned to the **Firewall policy details** page.
6. Under **Unique allowed SQL statements**, notice that your selected SQL statement is now listed at the top.
Expand All @@ -267,6 +267,6 @@ Congratulations! You finished the Get Started with Oracle Data Safe Fundamentals
## Acknowledgements
- **Author** - Jody Glover, Consulting User Assistance Developer, Database Development
- **Last Updated By/Date** - Jody Glover, Dec 13, 2024
- **Last Updated By/Date** - Jody Glover, Dec 18, 2024

0 comments on commit 13f75bb

Please sign in to comment.