Skip to main content

Oracle Cloud Infrastructure (OCI) Inventory

Overview

The Lacework Console provides visibility into Oracle Cloud Infrastructure (OCI) resources that are integrated with Lacework. A resource can be any entity within the cloud deployment, such as Virtual Machines (Instances), Object Storage, Network, etc.

Use the OCI Resource Inventory to view and monitor in-use OCI resources and configuration changes. Lacework takes regular snapshots of your resources, and you can track configuration changes (diffs) through the Lacework Console.

To access the OCI Resource Inventory page, navigate to Resource Inventory, then select All OCI Resources from the Resource Group drop down.

Supported Resource Types

See OCI Configuration Datasources.

Before you Begin

To populate the OCI Resource Inventory, you must integrate Lacework with your OCI environment.

Resource Summary

Lacework populates this page after at least one OCI integration is configured.

Filters:

  • The date/time range filter and any optional filters at top of the page apply to all data displayed on the page.
  • If nothing is displayed, consider increasing the date range.
  • The column descriptions in the table below also describe the equivalent filters.

Available actions:

  • Click Refresh to refresh the table data.
  • Click Download to get a CSV file of the table contents.
  • Click Select columns to hide or show the set of columns that are displayed in the table.
  • Click Search to search for specific content within the table.

The columns / filters on the OCI Resource Inventory page are explained below:

Column / FilterDescription
Resource NameDisplays the name of the OCI resource. Each row in the table represents a resource. Click the name to open the resource’s configuration.
ServiceDisplays the OCI service that the resource corresponds to.
Resource TypeDisplays the type of resource.
StatusDisplays the status of data collection from the resource.
Compartment nameDisplays the specific compartment name that the resource type belongs to.
Compartment IDDisplays the specific compartment identifier that the resource type belongs to.
Compartment (filter only)Filter for resources in the selected compartment names/IDs. This filter has a nested view where you can drill down through and select parent/child compartments.
RegionDisplays the region where the resource is located.
Resource Tags (hidden by default)Click {...} to view the resource’s tags.
Recently Updated (24hrs) (hidden by default)Displays whether there was an update in the last 24 hours.
Last collected timeDisplays the last time data collection was made on the resource.

Resource Configuration

To view the resource configuration, click a resource name under the Resource Name column.

This page shows the differences between the previous and current configuration of the resource. If the previous configuration for the resource is not found, then only the current configuration is shown.

The following information is shown:

KeyDescription
Historical/Latest ConfigurationThe Lacework generated unique ID for the configuration. If more than two historical configurations exist, click View more to display the Configuration History page.
Start TimeDisplays when data collection started.
End TimeDisplays when data collection ended.
ChangesA diff of the changes made between the previous and current configuration.

Available actions:

  • Copy the resource name to your clipboard.
  • Download the configuration collection details in JSON format.

Configuration History

To open the Configuration History page, click View more below Historical Configuration. This is only available if Lacework has discovered more than two historical configurations on the resource.

Details of the resource are displayed, see Configuration History Resources to compare previous configurations.

Configuration History Resources

Available actions:

  • To compare two configurations, select their checkboxes and click Diff configurations.
  • Click Refresh to refresh the table data.
  • Click Download to get a CSV file of the table contents.
  • Click Select columns to hide or show the set of columns that are displayed in the table.
  • Click Search to search for specific content within the table.

Each row in the table represents a Lacework generated unique ID for the configuration. The information displayed in the table is explained below:

ColumnDescription
ConfigurationThe Lacework generated unique ID for the configuration. Click on the ID to view the configuration.
Start TimeDisplays when data collection started.
End TimeDisplays when data collection ended.
Asset name (hidden by default)The Oracle Cloud ID of the resource.
Status (hidden by default)Displays the status of data collection from the resource.
Service (hidden by default)Displays the OCI service that the resource corresponds to.
API key (hidden by default)Displays the OCI API endpoint that was used to gather the data for the configuration change.
Compartment ID (hidden by default)Displays the specific compartment identifier that the resource type belongs to.
Compartment name (hidden by default)Displays the specific compartment name that the resource type belongs to.
Parent compartments (hidden by default)The parent compartment identifiers (if applicable) for the resource configuration. This can include multiple parent and grandparent compartment identifiers to reflect the hierarchical structure of the compartment.
Resource TypeDisplays the type of resource.
Resource name (hidden by default)The Oracle Cloud ID of the resource.
Region (hidden by default)Displays the region where the resource is located.
Configuration (hidden by default)Click {...} to view the configuration.
Resource Tags (hidden by default)Click {...} to view the resource’s tags.
Error type (hidden by default)The type of error (if applicable) relating to data collection of the resource configuration.
Error messageThe error message (if applicable) relating to data collection of the resource configuration.

Time Frame for Resource Changes to be Seen

Lacework takes a snapshot of resources on a periodic time frame. Depending on the time that Lacework takes the snapshot, changes may not be captured until up to 24 hours after the changes are made. See the following examples:

  • A resource change is made on Monday at 1:00 AM, and Lacework takes a snapshot on Monday at 2:00 AM.
    • The snapshot includes the change.
  • A resource change is made on Monday at 3:00 AM, but Lacework took a snapshot on Monday at 2:00 AM.
    • The snapshot does not include the change.
    • The next snapshot on Tuesday at 2:00 AM will capture the change.