Data Source: oci_data_safe_discovery_jobs_results

This data source provides the list of Discovery Jobs Results in Oracle Cloud Infrastructure Data Safe service.

Gets a list of discovery results based on the specified query parameters.

Example Usage

data "oci_data_safe_discovery_jobs_results" "test_discovery_jobs_results" {
	#Required
	discovery_job_id = oci_data_safe_discovery_job.test_discovery_job.id

	#Optional
	column_name = var.discovery_jobs_result_column_name
	discovery_type = var.discovery_jobs_result_discovery_type
	is_result_applied = var.discovery_jobs_result_is_result_applied
	object = var.discovery_jobs_result_object
	planned_action = var.discovery_jobs_result_planned_action
	schema_name = var.discovery_jobs_result_schema_name
}

Argument Reference

The following arguments are supported:

• column_name - (Optional) A filter to return only a specific column based on column name.
• discovery_job_id - (Required) The OCID of the discovery job.
• discovery_type - (Optional) A filter to return only the resources that match the specified discovery type.
• is_result_applied - (Optional) A filter to return the discovery result resources based on the value of their isResultApplied attribute.
• object - (Optional) A filter to return only items related to a specific object name.
• planned_action - (Optional) A filter to return only the resources that match the specified planned action.
• schema_name - (Optional) A filter to return only items related to specific schema name.

Attributes Reference

The following attributes are exported:

• discovery_job_result_collection - The list of discovery_job_result_collection.

DiscoveryJobsResult Reference

The following attributes are exported:

• app_defined_child_column_keys - Unique keys identifying the columns that are application-level (non-dictionary) children of the sensitive column.
• app_name - The name of the application. An application is an entity that is identified by a schema and stores sensitive information for that schema. Its value will be same as schemaName, if no value is passed.
• column_name - The name of the sensitive column.
• data_type - The data type of the sensitive column.
• db_defined_child_column_keys - Unique keys identifying the columns that are database-level (dictionary-defined) children of the sensitive column.
• discovery_job_id - The OCID of the discovery job.
• discovery_type - The type of the discovery result. It can be one of the following three types: NEW: A new sensitive column in the target database that is not in the sensitive data model. DELETED: A column that is present in the sensitive data model but has been deleted from the target database. MODIFIED: A column that is present in the target database as well as the sensitive data model but some of its attributes have been modified.
• estimated_data_value_count - The estimated number of data values the column has in the associated database.
• is_result_applied - Indicates whether the discovery result has been processed. You can update this attribute using the PatchDiscoveryJobResults operation to track whether the discovery result has already been processed and applied to the sensitive data model.
• key - The unique key that identifies the discovery result.
• modified_attributes - The attributes of a sensitive column that have been modified in the target database. It’s populated only in the case of MODIFIED discovery results and shows the new values of the modified attributes.
  • app_defined_child_column_keys - Unique keys identifying the columns that are application-level (non-dictionary) children of the sensitive column.
  • db_defined_child_column_keys - Unique keys identifying the columns that are database-level (dictionary-defined) children of the sensitive column.
• object - The database object that contains the sensitive column.
• object_type - The type of the database object that contains the sensitive column.
• parent_column_keys - Unique keys identifying the columns that are parents of the sensitive column. At present, it tracks a single parent only.
• planned_action - Specifies how to process the discovery result. It’s set to NONE by default. Use the PatchDiscoveryJobResults operation to update this attribute. You can choose one of the following options: ACCEPT: To accept the discovery result and update the sensitive data model to reflect the changes. REJECT: To reject the discovery result so that it doesn’t change the sensitive data model. INVALIDATE: To invalidate a newly discovered column. It adds the column to the sensitive data model but marks it as invalid. It helps track false positives and ensure that they aren’t reported by future discovery jobs. After specifying the planned action, you can use the ApplyDiscoveryJobResults operation to automatically process the discovery results.
• relation_type - The type of referential relationship the sensitive column has with its parent. NONE indicates that the sensitive column does not have a parent. DB_DEFINED indicates that the relationship is defined in the database dictionary. APP_DEFINED indicates that the relationship is defined at the application level and not in the database dictionary.
• sample_data_values - Original data values collected for the sensitive column from the associated database. Sample data helps review the column and ensure that it actually contains sensitive data. Note that sample data is retrieved by a data discovery job only if the isSampleDataCollectionEnabled attribute is set to true. At present, only one data value is collected per sensitive column.
• schema_name - The database schema that contains the sensitive column.
• sensitive_columnkey - The unique key that identifies the sensitive column represented by the discovery result.
• sensitive_type_id - The OCID of the sensitive type associated with the sensitive column.