Data Source: oci_data_safe_discovery_jobs

This data source provides the list of Discovery Jobs in Oracle Cloud Infrastructure Data Safe service.

Gets a list of incremental discovery jobs based on the specified query parameters.

Example Usage

data "oci_data_safe_discovery_jobs" "test_discovery_jobs" {
	#Required
	compartment_id = var.compartment_id

	#Optional
	access_level = var.discovery_job_access_level
	compartment_id_in_subtree = var.discovery_job_compartment_id_in_subtree
	discovery_job_id = oci_data_safe_discovery_job.test_discovery_job.id
	display_name = var.discovery_job_display_name
	sensitive_data_model_id = oci_data_safe_sensitive_data_model.test_sensitive_data_model.id
	state = var.discovery_job_state
	target_id = oci_cloud_guard_target.test_target.id
}

Argument Reference

The following arguments are supported:

• access_level - (Optional) Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
• compartment_id - (Required) A filter to return only resources that match the specified compartment OCID.
• compartment_id_in_subtree - (Optional) Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the ‘accessLevel’ setting.
• discovery_job_id - (Optional) A filter to return only the resources that match the specified discovery job OCID.
• display_name - (Optional) A filter to return only resources that match the specified display name.
• sensitive_data_model_id - (Optional) A filter to return only the resources that match the specified sensitive data model OCID.
• state - (Optional) A filter to return only the resources that match the specified lifecycle state.
• target_id - (Optional) A filter to return only items related to a specific target OCID.

Attributes Reference

The following attributes are exported:

• discovery_job_collection - The list of discovery_job_collection.

DiscoveryJob Reference

The following attributes are exported:

• compartment_id - The OCID of the compartment that contains the discovery job.
• defined_tags - Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example: {"Operations.CostCenter": "42"}
• discovery_type - The type of the discovery job. It defines the job’s scope. NEW identifies new sensitive columns in the target database that are not in the sensitive data model. DELETED identifies columns that are present in the sensitive data model but have been deleted from the target database. MODIFIED identifies columns that are present in the target database as well as the sensitive data model but some of their attributes have been modified. ALL covers all the above three scenarios and reports new, deleted and modified columns.
• display_name - The display name of the discovery job.
• freeform_tags - Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example: {"Department": "Finance"}
• id - The OCID of the discovery job.
• is_app_defined_relation_discovery_enabled - Indicates if the discovery job should identify potential application-level (non-dictionary) referential relationships between columns. Note that data discovery automatically identifies and adds database-level (dictionary-defined) relationships. This option helps identify application-level relationships that are not defined in the database dictionary, which in turn, helps identify additional sensitive columns and preserve referential integrity during data masking. It’s disabled by default and should be used only if there is a need to identify application-level relationships.
• is_include_all_schemas - Indicates if all the schemas in the associated target database are used for data discovery. If it is set to true, sensitive data is discovered in all schemas (except for schemas maintained by Oracle).
• is_include_all_sensitive_types - Indicates if all the existing sensitive types are used for data discovery. If it’s set to true, the sensitiveTypeIdsForDiscovery attribute is ignored and all sensitive types are used.
• is_sample_data_collection_enabled - Indicates if the discovery job should collect and store sample data values for the discovered columns. Sample data helps review the discovered columns and ensure that they actually contain sensitive data. As it collects original data from the target database, it’s disabled by default and should be used only if it’s acceptable to store sample data in Data Safe’s repository in Oracle Cloud. Note that sample data values are not collected for columns with the following data types: LONG, LOB, RAW, XMLTYPE and BFILE.
• schemas_for_discovery - The schemas used for data discovery.
• sensitive_data_model_id - The OCID of the sensitive data model associated with the discovery job.
• sensitive_type_ids_for_discovery - The OCIDs of the sensitive types used for data discovery.
• state - The current state of the discovery job.
• system_tags - System tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"orcl-cloud.free-tier-retained": "true"}
• tables_for_discovery - The data discovery jobs will scan the tables specified here, including both schemas and tables.
  • schema_name - This contains the name of the schema.
  • table_names - This contains an optional list of the table names.
• target_id - The OCID of the target database associated with the discovery job.
• time_finished - The date and time the discovery job finished, in the format defined by RFC3339..
• time_started - The date and time the discovery job started, in the format defined by RFC3339.
• total_columns_scanned - The total number of columns scanned by the discovery job.
• total_deleted_sensitive_columns - The total number of deleted sensitive columns identified by the discovery job.
• total_modified_sensitive_columns - The total number of modified sensitive columns identified by the discovery job.
• total_new_sensitive_columns - The total number of new sensitive columns identified by the discovery job.
• total_objects_scanned - The total number of objects (tables and editioning views) scanned by the discovery job.
• total_schemas_scanned - The total number of schemas scanned by the discovery job.