oci_cloud_guard_target
This resource provides the Target resource in Oracle Cloud Infrastructure Cloud Guard service.
Creates a target (Target resource), using parameters passed in a CreateTargetDetails resource.
Example Usage
resource "oci_cloud_guard_target" "test_target" {
#Required
compartment_id = var.compartment_id
display_name = var.target_display_name
target_resource_id = oci_cloud_guard_resource.test_resource.id
target_resource_type = var.target_target_resource_type
#Optional
defined_tags = {"foo-namespace.bar-key"= "value"}
description = var.target_description
freeform_tags = {"bar-key"= "value"}
state = var.target_state
target_detector_recipes {
#Required
detector_recipe_id = oci_cloud_guard_detector_recipe.test_detector_recipe.id
#Optional
detector_rules {
#Required
details {
#Optional
condition_groups {
#Required
compartment_id = var.compartment_id
condition = var.target_target_detector_recipes_detector_rules_details_condition_groups_condition
}
}
detector_rule_id = oci_events_rule.test_rule.id
}
}
target_responder_recipes {
#Required
responder_recipe_id = oci_cloud_guard_responder_recipe.test_responder_recipe.id
#Optional
responder_rules {
#Required
details {
#Optional
condition = var.target_target_responder_recipes_responder_rules_details_condition
configurations {
#Required
config_key = var.target_target_responder_recipes_responder_rules_details_configurations_config_key
name = var.target_target_responder_recipes_responder_rules_details_configurations_name
value = var.target_target_responder_recipes_responder_rules_details_configurations_value
}
mode = var.target_target_responder_recipes_responder_rules_details_mode
}
responder_rule_id = oci_events_rule.test_rule.id
}
}
}
Argument Reference
The following arguments are supported:
compartment_id
- (Required) Compartment OCID where the resource is createddefined_tags
- (Optional) (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:{"foo-namespace.bar-key": "value"}
description
- (Optional) The target description.Avoid entering confidential information.
display_name
- (Required) (Updatable) Display name for the target.Avoid entering confidential information.
freeform_tags
- (Optional) (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:{"bar-key": "value"}
Avoid entering confidential information.
state
- (Optional) (Updatable) The enablement state of the detector ruletarget_detector_recipes
- (Optional) (Updatable) List of detector recipes to attach to targetdetector_recipe_id
- (Required) Unique identifier for the target detector recipedetector_rules
- (Optional) (Updatable) List of overrides to be applied to detector rules associated with the targetdetails
- (Required) (Updatable) Parameters to update detector rule configuration details in a detector recipe attached to a target.condition_groups
- (Optional) (Updatable) Condition group corresponding to each compartmentcompartment_id
- (Required) (Updatable) Compartment OCID associated with conditioncondition
- (Required) (Updatable) The base condition resource.
detector_rule_id
- (Required) (Updatable) Unique identifier for the detector rule
target_resource_id
- (Required) Resource ID which the target uses to monitortarget_resource_type
- (Required) Type of resource that target support (COMPARTMENT/FACLOUD)target_responder_recipes
- (Optional) (Updatable) List of responder recipes to attach to targetresponder_recipe_id
- (Required) Unique identifier for responder reciperesponder_rules
- (Optional) (Updatable) List of overrides to be applied to responder rules associated with the targetdetails
- (Required) (Updatable) Parameters to update details for a responder rule for a target responder recipe. TargetResponderRuleDetails contains all configurations associated with the ResponderRule, whereas UpdateTargetResponderRecipeResponderRuleDetails refers to the details that are to be updated for ResponderRule.condition
- (Optional) (Updatable) The base condition resource.configurations
- (Optional) (Updatable) List of responder rule configurationsconfig_key
- (Required) (Updatable) Unique identifier of the configurationname
- (Required) (Updatable) Configuration namevalue
- (Required) (Updatable) Configuration value
mode
- (Optional) (Updatable) Execution mode for the responder rule
responder_rule_id
- (Required) (Updatable) Unique identifier for target detector recipe
** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
Attributes Reference
The following attributes are exported:
compartment_id
- Compartment OCID where the resource is createddefined_tags
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:{"foo-namespace.bar-key": "value"}
description
- The target descriptiondisplay_name
- Target display namefreeform_tags
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:{"bar-key": "value"}
Avoid entering confidential information.
id
- Unique identifier that can’t be changed after creationinherited_by_compartments
- List of inherited compartmentslifecyle_details
- A message describing the current lifecycle state in more detail. For example, can be used to provide actionable information for a resource in Failed state. [DEPRECATE]recipe_count
- Total number of recipes attached to targetstate
- The current lifecycle state of the targetsystem_tags
- System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. System tags can be viewed by users, but can only be created by the system. Example:{"orcl-cloud.free-tier-retained": "true"}
target_details
- Details specific to the target type.security_zone_display_name
- The name of the security zone to associate with this compartment.security_zone_id
- The OCID of the security zone to associate with this compartmenttarget_resource_type
- Target type, determined by the type of resource for which the target was createdtarget_security_zone_recipes
- The list of security zone recipes to associate with this compartmentcompartment_id
- The OCID of the compartment that contains the recipedefined_tags
- Defined tags for this resource. Each key is predefined and scoped to a namespace. Example:{"foo-namespace.bar-key": "value"}
description
- The recipe’s descriptiondisplay_name
- The recipe’s display namefreeform_tags
- Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example:{"bar-key": "value"}
Avoid entering confidential information.
id
- Unique identifier that can’t be changed after creationlifecycle_details
- A message describing the current state in more detail. For example, this can be used to provide actionable information for a recipe in theFailed
state.owner
- The owner of the recipesecurity_policies
- The list of security policy IDs that are included in the recipestate
- The current lifecycle state of the recipesystem_tags
- System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. System tags can be viewed by users, but can only be created by the system. Example:{"orcl-cloud.free-tier-retained": "true"}
time_created
- The time the recipe was created. An RFC3339 formatted datetime string.time_updated
- The time the recipe was last updated. An RFC3339 formatted datetime string.
target_detector_recipes
- List of detector recipes attached to targetcompartment_id
- Compartment OCID of the detector recipedescription
- Detector recipe description.detector
- Type of detectordetector_recipe_id
- Unique identifier for of original Oracle-managed detector recipe on which the TargetDetectorRecipe is baseddetector_recipe_type
- Recipe type ( STANDARD, ENTERPRISE )detector_rules
- List of detector rules for the detector recipe - user inputdata_source_id
- The ID of the attached data sourcedescription
- Description for TargetDetectorRecipeDetectorRule resourcedetails
- Overriden settings of a detector rule in recipe attached to target.condition_groups
- Condition group corresponding to each compartmentcompartment_id
- Compartment OCID associated with conditioncondition
- The base condition resource.
configurations
- List of detector rule configurationsconfig_key
- Unique identifier of the configurationdata_type
- Configuration data typename
- Configuration namevalue
- Configuration valuevalues
- List of configuration valueslist_type
- Configuration list item type (CUSTOM or MANAGED)managed_list_type
- Type of content in the managed listvalue
- Configuration value
is_configuration_allowed
- Configuration allowed or notis_enabled
- Enablement state of the detector rulelabels
- User-defined labels for a detector rulerisk_level
- The risk level of the detector rule
detector
- Detector type for the ruledetector_rule_id
- The unique identifier of the detector ruledisplay_name
- Display name for TargetDetectorRecipeDetectorRule resourceentities_mappings
- Data source entities mapping for a detector ruledisplay_name
- Display name of the entityentity_type
- Type of entityquery_field
- The entity value mapped to a data source query
lifecycle_details
- A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.managed_list_types
- List of managed list types related to this rulerecommendation
- Recommendation for TargetDetectorRecipeDetectorRule resourceresource_type
- The type of resource which is monitored by the detector rule. For example, Instance, Database, VCN, Policy. To find the resource type for a particular rule, see Detector Recipe Reference.Or try Detector Recipe Reference.
service_type
- Service type of the configuration to which the rule is appliedstate
- The current lifecycle state of the detector ruletime_created
- The date and time the target detector recipe rule was created. Format defined by RFC3339.time_updated
- The date and time the target detector recipe rule was last updated. Format defined by RFC3339.
display_name
- Display name of the detector recipeeffective_detector_rules
- List of currently enabled detector rules for the detector type for recipe after applying defaultsdata_source_id
- The ID of the attached data sourcedescription
- Description for TargetDetectorRecipeDetectorRule resourcedetails
- Overriden settings of a detector rule in recipe attached to target.condition_groups
- Condition group corresponding to each compartmentcompartment_id
- Compartment OCID associated with conditioncondition
- The base condition resource.
configurations
- List of detector rule configurationsconfig_key
- Unique identifier of the configurationdata_type
- Configuration data typename
- Configuration namevalue
- Configuration valuevalues
- List of configuration valueslist_type
- Configuration list item type (CUSTOM or MANAGED)managed_list_type
- Type of content in the managed listvalue
- Configuration value
is_configuration_allowed
- Configuration allowed or notis_enabled
- Enablement state of the detector rulelabels
- User-defined labels for a detector rulerisk_level
- The risk level of the detector rule
detector
- Detector type for the ruledetector_rule_id
- The unique identifier of the detector ruledisplay_name
- Display name for TargetDetectorRecipeDetectorRule resourceentities_mappings
- Data source entities mapping for a detector ruledisplay_name
- Display name of the entityentity_type
- Type of entityquery_field
- The entity value mapped to a data source query
lifecycle_details
- A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.managed_list_types
- List of managed list types related to this rulerecommendation
- Recommendation for TargetDetectorRecipeDetectorRule resourceresource_type
- The type of resource which is monitored by the detector rule. For example, Instance, Database, VCN, Policy. To find the resource type for a particular rule, see Detector Recipe Reference.Or try Detector Recipe Reference.
service_type
- Service type of the configuration to which the rule is appliedstate
- The current lifecycle state of the detector ruletime_created
- The date and time the target detector recipe rule was created. Format defined by RFC3339.time_updated
- The date and time the target detector recipe rule was last updated. Format defined by RFC3339.
id
- OCID for the detector recipeowner
- Owner of the detector recipestate
- The current lifecycle state of the resourcetime_created
- The date and time the target detector recipe was created. Format defined by RFC3339.time_updated
- The date and time the target detector recipe was last updated. Format defined by RFC3339.
target_resource_id
- Resource ID which the target uses to monitortarget_resource_type
- Type of targettarget_responder_recipes
- List of responder recipes attached to targetcompartment_id
- Compartment OCIDdescription
- Target responder descriptiondisplay_name
- Target responder recipe display nameeffective_responder_rules
- List of currently enabled responder rules for the responder type for recipe after applying defaultscompartment_id
- Compartment OCIDdescription
- Responder rule descriptiondetails
- Detailed information for a responder rulecondition
- The base condition resource.configurations
- List of responder rule configurationsconfig_key
- Unique identifier of the configurationname
- Configuration namevalue
- Configuration value
is_enabled
- Enabled state for the responder rulemode
- Execution mode for the responder rule
display_name
- Responder rule display namelifecycle_details
- A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.policies
- List of policiesresponder_rule_id
- Unique identifier for the responder rulestate
- The current lifecycle state of the responder rulesupported_modes
- Supported execution modes for the responder ruletime_created
- The date and time the target responder recipe rule was created. Format defined by RFC3339.time_updated
- The date and time the target responder recipe rule was last updated. Format defined by RFC3339.type
- Type of responder
id
- Unique identifier of target responder recipe that can’t be changed after creationowner
- Owner of target responder reciperesponder_recipe_id
- Unique identifier for the Oracle-managed responder recipe from which this recipe was clonedresponder_rules
- List of responder rules associated with the recipe - user inputcompartment_id
- Compartment OCIDdescription
- Responder rule descriptiondetails
- Detailed information for a responder rulecondition
- The base condition resource.configurations
- List of responder rule configurationsconfig_key
- Unique identifier of the configurationname
- Configuration namevalue
- Configuration value
is_enabled
- Enabled state for the responder rulemode
- Execution mode for the responder rule
display_name
- Responder rule display namelifecycle_details
- A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.policies
- List of policiesresponder_rule_id
- Unique identifier for the responder rulestate
- The current lifecycle state of the responder rulesupported_modes
- Supported execution modes for the responder ruletime_created
- The date and time the target responder recipe rule was created. Format defined by RFC3339.time_updated
- The date and time the target responder recipe rule was last updated. Format defined by RFC3339.type
- Type of responder
time_created
- The date and time the target responder recipe rule was created. Format defined by RFC3339.time_updated
- The date and time the target responder recipe rule was last updated. Format defined by RFC3339.
time_created
- The date and time the target was created. Format defined by RFC3339.time_updated
- The date and time the target was last updated. Format defined by RFC3339.
Timeouts
The timeouts
block allows you to specify timeouts for certain operations:
* create
- (Defaults to 20 minutes), when creating the Target
* update
- (Defaults to 20 minutes), when updating the Target
* delete
- (Defaults to 20 minutes), when destroying the Target
Import
Targets can be imported using the id
, e.g.
$ terraform import oci_cloud_guard_target.test_target "id"