Build Data Safe assessment, data masking, and audit policy configurations for database security.
Last verified: May 2026
Build Data Safe assessment, data masking, and audit policy configurations for database security.
Required Fields
compartmentIddisplayNametargetDatabaseIdsecurityAssessment.isEnabledOutput will appear here...Build Data Safe assessment, data masking, and audit policy configurations for database security. This tool helps OCI engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.
No. This tool runs entirely in your browser and generates configuration JSON that you can copy and paste into your infrastructure-as-code templates, CLI commands, or cloud console. It never connects to any cloud account or sends data externally.
The tool produces syntactically valid configurations based on current OCI service specifications. Always review generated configs against your organization security policies and test in a non-production environment before deploying.
Your team is preparing for a SOC 2 audit covering customer-data handling. The builder generates a Data Safe config: weekly security assessments on the Autonomous DB, daily user assessments to catch privilege drift, data discovery scan finding all PII columns, audit policies capturing all SELECT/INSERT/UPDATE on those columns. Reports flow to Object Storage for auditor review. Compliance team is happy: assessments are automated, evidence is comprehensive, and findings drive remediation tickets weekly.
The builder constructs Data Safe configurations: target database registration (Autonomous DB / DB System / external), security assessment configuration (schedule + reporting destination), user assessment (user privileges audit + scheduled review), data discovery (sensitive data identification rules), data masking format library (predefined masks for SSN/credit-card/email/etc.), audit policies (DB-level audit rules with retention). Output is generated as oci data-safe commands and Terraform oci_data_safe_* resources.
Data Safe assessments are FREE for OCI Autonomous Database and OCI MySQL HeatWave — Oracle wants customers using their managed databases. Run security assessments at least monthly to catch configuration drift, missing patches, and over-privileged users before auditors do.
Data masking templates are reusable across environments. Build a single mask config for sensitive columns (SSN, credit card, email) and apply it when refreshing dev/test environments from production. Without masking, a single dev DB compromise = full PII leak.
Audit policies in Data Safe complement OCI Audit. OCI Audit captures API-level events; Data Safe audit policies capture in-database events (SELECT on sensitive tables, privilege escalations, schema changes). For compliance, you need BOTH layers.
Was this tool helpful?
Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.