Skip to content

Commit

Permalink
Pull request for Get Started with Oracle Data Safe Fundamentals works…
Browse files Browse the repository at this point in the history
…hop (#255)

* Updates from Michaels feedback

* Cloud World updates

* Cloud World 2022

* Updates after Bettina's review

for cloud world 2022

* Data Masking role

Moved Data Masking role grant to Data Masking lab

* Message about filter

* Fixes after dev review

* fixes based on Dev feedback

* Tiger Team training update

Went through all labs and updated most screenshots and updated instructions where needed. Also added a few new features.

* Updates for Tiger Team

* Update prepare-environment.md

Updated this file to work for both workshops

* Files for an advanced workshop for tiger team training

* Update api-copy-audit-data.md

Based on Anna's feedback

* Update api-copy-audit-data.md

Fixed up the copy of code

* Update api-schedule-audit-data-copy.md

* Update api-schedule-audit-data-copy.md

* Update api-schedule-audit-data-copy.md

* With errors

* Update api-copy-audit-data.md

* Update api-copy-audit-data.md

* Update api-copy-audit-data.md

Removed installing the SDK because it's already installed on Cloud Shell. An updated java file is required.

* Update api-copy-audit-data.md

* Updated

* Updates

* Update manifest.json

* Update introduction-adv.md

* Update cli.md

* Update api-copy-audit-data.md

* Update cli.md

* Update cli.md

* Updated based on Bettina's feedback

* Updated screenshots for new OCI interface

* update

* updates for 2nd workshop

* Q/A testing updates

* lint checker Q/A updates

* updates for integration workshop

* Testing

* update for timings

* Added Proceed to next lab

* Removed Data Safe enablement step

April 11th, Data Safe is enabled during target registration behind the scenes.

* OCI menu change

* Added folders for Cloud World 2023

* OCW2023

Initial changes for Bettina

* Updated steps for Oracle Cloud World files

Note: Graphics still need to be updated.

* Update manifest.json

* Added graphics and did a run through

* Updates after dry run on June 7

* Updates for quarterly Q/A

* Autonomous Database Serverless name change

* Updates for Cloud World

* updated title of HOL

* Added videos

* Updates for new features in Data Safe

All labs are updated

* Update assess-database-users.md

mentioned schema access

* Updated workshop with current interface and streamlined labs 3 and 4

* Updated capitalization, dates, and minor things

* Updated capitilizations

* temporary fix added for java example file

* Updated before go-live

* updated graphics to deal with Notifications tab

* updated SQL script

* fix

* Fixed brackets on permissions

* sql firewall

* sql firewall

* sql firewall

* sql firewall

* sql firewall revamp of labs

* Fixing error in column name

COUNTRY_ID should be COUNTRY_ABBREV

* Updates for Database Actions

updated a few screenshots

* ai

* Updates for OpenWorld2024

* OpenWorld update

* CloudWorld updates

* Update access-environment-ocw-sandbox.md

* new environment updates

* New environment updates

* HOL updates

Blurred compartment names

* Fixed links

filed links

* Updates after Data Discovery and Data Masking new features

Updates apply to Fundamentals workshop and HOL

* Updates for HOL

defer risk security assessment

* Updates for Cloud World and sandbox changes

Updates for Cloud World and sandbox changes

* activity auditing wizard

Activity auditing and alerts combined

* Activity Auditing wizard

Updates after feedback from Bettina

* Updates after Cloud World

changes to most labs

* Activity Auditing wizard updates

updated screenshots and tested for error

* ua and sa updates

ua and sa updates and final tests with activity auditing wizard

* removed sql firewall files

so that we can publish activity auditing changes without any more delays

* removing compartment info
  • Loading branch information
joglover authored Oct 17, 2024
1 parent 1aae0d6 commit 58097dc
Show file tree
Hide file tree
Showing 81 changed files with 386 additions and 898 deletions.
4 changes: 2 additions & 2 deletions data-safe/access-environment/access-environment-sandbox.md
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,7 @@ Database Actions provides a way for you to run SQL commands on your database. Th
- If a tenancy administrator provided you an Autonomous Database, obtain the password from that person.
- If you are using an Oracle-provided environment, enter the database password provided to you.

4. Close the **SQL History** and **Warning** dialog boxes.
4. Close any open dialog boxes.

5. Review the interface. Here are the ways that you use Database Actions during the workshop:

Expand Down Expand Up @@ -129,4 +129,4 @@ You may now **proceed to the next lab**.
## Acknowledgements

- **Author** - Jody Glover, Consulting User Assistance Developer, Database Development
- **Last Updated By/Date** - Jody Glover, August 22, 2024
- **Last Updated By/Date** - Jody Glover, October 16, 2024
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified data-safe/access-environment/images/feature-metrics-bottom-half.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified data-safe/access-environment/images/feature-metrics-top-half.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified data-safe/access-environment/images/target-databases-page-oci.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
Expand Up @@ -95,28 +95,24 @@ This lab assumes you have:

- Details include assessment name, OCID, compartment to which the assessment was saved, target database name, target database version, assessment date and time, schedule, name of the baseline assessment (if one is set), and whether the assessment complies with the baseline (Yes, No, or No baseline set).

![Latest security assessment assessment information tab](images/latest-sa-assessment-information-tab.png "Latest security assessment assessment information tab")
![Latest security assessment assessment information tab](images/latest-sa-assessment-information-tab2.png "Latest security assessment assessment information tab")

4. Rename the latest security assessment: Click the pencil icon to the right of **Name**, enter **SA_target-database** (replace **target-database** with the name of your target database), and click the **Save** icon.

![Rename latest security assessment](images/rename-latest-sa-assessment.png "Rename latest security assessment")

5. Scroll down and view the **Assessment details** section.
6. Scroll down and view the **Assessment details** section.

- This section shows you all the findings for each risk category.
- Risks are color-coded to help you easily identify categories that have high risk findings (red).
- The high risk findings listed under **Privileges and Roles** were introduced when you ran the SQL script to populate your target database with sample data.

![Latest Security Assessment Assessment details section](images/latest-sa-assessment-details-section.png "Latest Security Assessment Assessment details section")

6. Under **Filters by risks** on the left, notice that you can select the risk levels that you want displayed. Also notice on the left that you can filter by references.
7. Under **Filters by risks** on the left, notice that you can select the risk levels that you want displayed. Also notice on the left that you can filter by references.

![Security Assessment filters](images/sa-filters.png "Security Assessment filters")

8. On the right, expand categories and review the findings.

- Each finding shows you the status (risk level), a summary of the finding, details about the finding, remarks to help you to mitigate the risk, and references - whether a finding is recommended by the Center for Internet Security (**CIS**), European Union's General Data Protection Regulation (**GDPR**), Security Technical Implementation Guide (**STIG**), and/or **Oracle best practices**. These references make it easy for you to identify the recommended security controls.
- In the example below, the **Transparent Data Encryption** finding has two references: **STIG** and **GDPR**.
- Each finding shows you the status (risk level), a summary of the finding, details about the finding, remarks to help you to mitigate the risk, and references - whether a finding is recommended by the Center for Internet Security (**CIS**), European Union's General Data Protection Regulation (**EU GDPR**), Security Technical Implementation Guide (**DISA STIG**), and/or **Oracle best practices**. These references make it easy for you to identify the recommended security controls.
- In the example below, the **Transparent Data Encryption** finding has three references: **Oracle Best Practices**, **DISA STIG**, and **GDPR**.

![Transparent Data Encryption finding](images/transparent-data-encryption-finding.png "Transparent Data Encryption finding")

Expand All @@ -134,7 +130,7 @@ You can defer or change the risk level of a risk finding. In this task, defer th

![Update risk for finding panel](images/update-risk-for-finding.png "Update risk for finding panel")

3. Notice that the risk finding is recatorized in the **Assessment details** section.
3. Notice that the risk finding is recategorized in the **Assessment details** section.

![Deferred risk finding](images/deferred-risk-finding.png "Deferred risk finding")

Expand Down Expand Up @@ -183,9 +179,9 @@ In this task, you issue a `GRANT` command on your target database so that later,
The **Refresh now** panel is displayed.
3. In the **Save latest assessment** box, enter **My Security Assessment**, and then click **Refresh now**. Wait for the status to read as **SUCCEEDED**.
3. Leave the default name as is, and click **Refresh now**. Wait for the status to read as **SUCCEEDED**.
- This action updates the data in the latest security assessment for your target database and also saves a copy of the assessment (named My Security Assessment) to the Assessment History.
- This action updates the data in the latest security assessment for your target database and also saves a copy of the assessment to the Assessment History.
- The refresh operation takes about one minute.
![Security Assessment Refresh now panel](images/sa-refresh-now-panel.png "Security Assessment Refresh now panel")
Expand All @@ -194,7 +190,7 @@ In this task, you issue a `GRANT` command on your target database so that later,
![Security Assessment Assessed on right now](images/sa-assessed-on-right-now.png "Security Assessment assessed on right now")
5. Scroll down and expand **System Privileges Granted to Public**.
5. Scroll down and expand **System Privileges Granted to PUBLIC**.
- This is a high risk finding.
- In the **Details** section, you can see that the grant you made in the previous task is identified.
Expand Down Expand Up @@ -229,4 +225,4 @@ You may now **proceed to the next lab**.
## Acknowledgements
* **Author** - Jody Glover, Consulting User Assistance Developer, Database Development
* **Last Updated By/Date** - Jody Glover, August 22, 2024
* **Last Updated By/Date** - Jody Glover, October 16, 2024
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
56 changes: 19 additions & 37 deletions data-safe/assess-database-users/assess-database-users.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,6 @@ In this lab, you will:

- View the overview page for User Assessment
- Analyze users in the latest user assessment
- (Optional) Review the `ADMIN` user's audit records
- Change users and entitlements on the target database
- Refresh the latest user assessment
- Compare the latest user assessment with the initial user assessment
Expand All @@ -27,7 +26,6 @@ This lab assumes you have:
- Obtained an Oracle Cloud account and signed in to the Oracle Cloud Infrastructure Console
- Access to or prepared an environment for this workshop
- Access to a registered target database
- (Optional) Started audit data collection for your target database in Oracle Data Safe. Audit data collection is required if you want to view users' audit records from within User Assessment.


### Assumptions
Expand Down Expand Up @@ -85,7 +83,12 @@ The latest user assessment is the one that was automatically generated by Oracle

![Assessment Information tab](images/ua-assessment-information-tab.png "Assessment Information tab")

4. Scroll down and review the **User details** section. This table provides the following information about each user:

4. Rename the latest user assessment: Click the pencil icon to the right of **Name**, enter **UA\_target-database\_LATEST** (replace **target-database** with the name of your target database), and click the **Save** icon.

![Rename latest user assessment](images/rename-latest-ua-assessment.png "Rename latest user assessment")

5. Scroll down and review the **User details** section. This table provides the following information about each user:

- User name
- User type (for example, PRIVILEGED, SCHEMA)
Expand All @@ -99,7 +102,7 @@ The latest user assessment is the one that was automatically generated by Oracle

![User Assessment latest assessment details](images/ua-latest-assessment-details.png "User Assessment latest assessment details")

5. In the **User name** column, click a user that is a **CRITICAL** potential risk, for example, **EVIL_RICH**.
6. In the **User name** column, click a user that is a **CRITICAL** potential risk, for example, **EVIL_RICH**.

The **User details** panel shows the following information about the user:

Expand All @@ -118,44 +121,22 @@ The latest user assessment is the one that was automatically generated by Oracle

![EVIL_RICH user details](images/ua-EVIL_RICH-user-details.png "EVIL_RICH user details")

6. Click **Close**.
7. Click **Close**.

7. To filter the report to show potentially critical risk users only, do the following: Click the **Overview** tab. In the **Potential user risk** chart, click the **Critical** section of the chart. A filter is automatically created.
8. To filter the report to show potentially critical risk users only, do the following: Click the **Overview** tab. In the **Potential user risk** chart, click the **Critical** section of the chart. A filter is automatically created.

![Critical risk users filter](images/ua-critical-risk-users-filter.png "Critical risk users filter")

8. To remove the filter, click the **X** next to the filter.


## Task 3 (Optional): Review the `ADMIN` user's audit records

1. Identify the row in the table for the `ADMIN` user. In the **Audit records** column for the `ADMIN` user, click **View activity**.

![ADMIN user audit records](images/ua-admin-user-audit-records.png "ADMIN user audit records")
9. To remove the filter, click the **X** next to the filter.

The **All activity** report for the `ADMIN` user is displayed.

2. Examine the report.

- The report is automatically filtered to show you audit records for the past one week, for the `ADMIN` user, and for your target database.
- At the top of the report, you can view totals for **Targets**, **DB users**, **Client hosts**, **DMLs**, **Privilege changes**, **DDLs**, **User/entitlement changes**, **Login failures**, **Login successes**, and **Total events**.
- The **Event** column in the table shows you the types of activities performed by the `ADMIN` user, for example, `GRANT`, `LOGON`, `CREATE USER`, and so on.
- At the bottom of the page, you can click the page numbers to view more audit records.

![All activity report for the ADMIN user top](images/ua-all-activity-top.png "All activity report for the ADMIN user bottom")

![All activity report for the ADMIN user bottom](images/ua-all-activity-bottom.png "All activity report for the ADMIN user bottom")

3. Click the browser's back button to return to the latest user assessment.


## Task 4: Change users and entitlements on the target database
## Task 3: Change users and entitlements on the target database

1. Access the SQL worksheet in **Database Actions**.

2. Clear the worksheet and the **Script Output** tab.

3. On the SQL worksheet, enter the following commands. Substitute your own password for database-password.
3. On the SQL worksheet, enter the following commands. Substitute your own password for `database-password`.

```
<copy>DROP USER evil_rich;
Expand All @@ -170,32 +151,33 @@ The latest user assessment is the one that was automatically generated by Oracle
5. On the **Script Output** tab at the bottom of the page, verify that the `EVIL_RICH` user is dropped, the `JOE_SMITH` user is created, and the grant is successful.
## Task 5: Refresh the latest user assessment
## Task 4: Refresh the latest user assessment
1. Return to the browser tab for Oracle Data Safe. You last left off viewing the latest user assessment.
2. Click the **Refresh now** button.
The **Refresh now** panel is displayed.
3. Keep the default name as is, and click **Refresh now**. Wait for the status of the latest user assessment to read as **SUCCEEDED**. Oracle Data Safe automatically saves a static copy of the assessment to the Assessment History.
3. Name the assessment **UA\_target-database\_2** (replace **target-database** with the name of your target database), and click **Refresh now**. Wait for the status of the latest user assessment to read as **SUCCEEDED**. Oracle Data Safe automatically saves a static copy of the assessment to the Assessment History.
![User Assessment Refresh Now panel](images/ua-refresh-now-panel.png "User Assessment Refresh Now panel")
4. Review the refreshed latest assessment.
## Task 6: Compare the latest user assessment with the initial user assessment
## Task 5: Compare the latest user assessment with the initial user assessment
You can select a user assessment to compare with the latest user assessment. With this option, you don't need to set a baseline. This option is only available when you are viewing the latest user assessment. Note that you could have set a baseline and compared the latest assessment to it.
You can select a user assessment to compare with the latest user assessment. With this option, you don't need to set a baseline. This option is available only when you are viewing the latest user assessment. Note that you could have set a baseline and compared the latest assessment to it.
1. While viewing the latest user assessment, on the left under **Resources**, click **Compare assessments**.
2. Scroll down to the **Comparison with other assessments** section.
3. If your compartment isn't shown, click **Change compartment** and select your compartment.
4. From the **Select assessment** drop-down list, select the initial assessment for your target database (second one in the list). As soon as you select it, the comparison operation is started.
4. From the **Select assessment** drop-down list, select the initial assessment for your target database. As soon as you select it, the comparison operation is started.
5. Review the results.
Expand All @@ -222,4 +204,4 @@ You may now **proceed to the next lab**.
## Acknowledgements
* **Author** - Jody Glover, Consulting User Assistance Developer, Database Development
* **Last Updated By/Date** - Jody Glover, August 22, 2024
* **Last Updated By/Date** - Jody Glover, October 16, 2024
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified data-safe/assess-database-users/images/ua-dashboard-charts1.png
Binary file modified data-safe/assess-database-users/images/ua-dashboard-charts2.png
Binary file modified data-safe/assess-database-users/images/ua-latest-charts1.png
Binary file modified data-safe/assess-database-users/images/ua-latest-charts2.png
Binary file modified data-safe/assess-database-users/images/ua-refresh-now-panel.png
Binary file modified data-safe/assess-database-users/images/ua-risk-summary-tab.png
Binary file modified data-safe/assess-database-users/images/ua-target-summary-tab.png
Loading

0 comments on commit 58097dc

Please sign in to comment.