DatabaseResourceHealthSignalData

import type { DatabaseResourceHealthSignalData } from "https://googleapis.deno.dev/v1/redis:v1.ts";

Common model for database resource health signal data.

interface DatabaseResourceHealthSignalData {

additionalMetadata?: {

[key: string]: any;

};

compliance?: Compliance[];

description?: string;

eventTime?: Date;

externalUri?: string;

location?: string;

name?: string;

provider?:

| "PROVIDER_UNSPECIFIED"

| "GCP"

| "AWS"

| "AZURE"

| "ONPREM"

| "SELFMANAGED"

| "PROVIDER_OTHER";

resourceContainer?: string;

resourceName?: string;

signalClass?:

| "CLASS_UNSPECIFIED"

| "THREAT"

| "VULNERABILITY"

| "MISCONFIGURATION"

| "OBSERVATION"

| "ERROR";

signalId?: string;

signalSeverity?:

| "SIGNAL_SEVERITY_UNSPECIFIED"

| "CRITICAL"

| "HIGH"

| "MEDIUM"

| "LOW";

signalType?:

| "SIGNAL_TYPE_UNSPECIFIED"

| "SIGNAL_TYPE_NOT_PROTECTED_BY_AUTOMATIC_FAILOVER"

| "SIGNAL_TYPE_GROUP_NOT_REPLICATING_ACROSS_REGIONS"

| "SIGNAL_TYPE_NOT_AVAILABLE_IN_MULTIPLE_ZONES"

| "SIGNAL_TYPE_NOT_AVAILABLE_IN_MULTIPLE_REGIONS"

| "SIGNAL_TYPE_NO_PROMOTABLE_REPLICA"

| "SIGNAL_TYPE_NO_AUTOMATED_BACKUP_POLICY"

| "SIGNAL_TYPE_SHORT_BACKUP_RETENTION"

| "SIGNAL_TYPE_LAST_BACKUP_FAILED"

| "SIGNAL_TYPE_LAST_BACKUP_OLD"

| "SIGNAL_TYPE_VIOLATES_CIS_GCP_FOUNDATION_2_0"

| "SIGNAL_TYPE_VIOLATES_CIS_GCP_FOUNDATION_1_3"

| "SIGNAL_TYPE_VIOLATES_CIS_GCP_FOUNDATION_1_2"

| "SIGNAL_TYPE_VIOLATES_CIS_GCP_FOUNDATION_1_1"

| "SIGNAL_TYPE_VIOLATES_CIS_GCP_FOUNDATION_1_0"

| "SIGNAL_TYPE_VIOLATES_CIS_CONTROLS_V8_0"

| "SIGNAL_TYPE_VIOLATES_NIST_800_53"

| "SIGNAL_TYPE_VIOLATES_NIST_800_53_R5"

| "SIGNAL_TYPE_VIOLATES_NIST_CYBERSECURITY_FRAMEWORK_V1_0"

| "SIGNAL_TYPE_VIOLATES_ISO_27001"

| "SIGNAL_TYPE_VIOLATES_ISO_27001_V2022"

| "SIGNAL_TYPE_VIOLATES_PCI_DSS_V3_2_1"

| "SIGNAL_TYPE_VIOLATES_PCI_DSS_V4_0"

| "SIGNAL_TYPE_VIOLATES_CLOUD_CONTROLS_MATRIX_V4"

| "SIGNAL_TYPE_VIOLATES_HIPAA"

| "SIGNAL_TYPE_VIOLATES_SOC2_V2017"

| "SIGNAL_TYPE_LOGS_NOT_OPTIMIZED_FOR_TROUBLESHOOTING"

| "SIGNAL_TYPE_QUERY_DURATIONS_NOT_LOGGED"

| "SIGNAL_TYPE_VERBOSE_ERROR_LOGGING"

| "SIGNAL_TYPE_QUERY_LOCK_WAITS_NOT_LOGGED"

| "SIGNAL_TYPE_LOGGING_MOST_ERRORS"

| "SIGNAL_TYPE_LOGGING_ONLY_CRITICAL_ERRORS"

| "SIGNAL_TYPE_MINIMAL_ERROR_LOGGING"

| "SIGNAL_TYPE_QUERY_STATISTICS_LOGGED"

| "SIGNAL_TYPE_EXCESSIVE_LOGGING_OF_CLIENT_HOSTNAME"

| "SIGNAL_TYPE_EXCESSIVE_LOGGING_OF_PARSER_STATISTICS"

| "SIGNAL_TYPE_EXCESSIVE_LOGGING_OF_PLANNER_STATISTICS"

| "SIGNAL_TYPE_NOT_LOGGING_ONLY_DDL_STATEMENTS"

| "SIGNAL_TYPE_LOGGING_QUERY_STATISTICS"

| "SIGNAL_TYPE_NOT_LOGGING_TEMPORARY_FILES"

| "SIGNAL_TYPE_CONNECTION_MAX_NOT_CONFIGURED"

| "SIGNAL_TYPE_USER_OPTIONS_CONFIGURED"

| "SIGNAL_TYPE_EXPOSED_TO_PUBLIC_ACCESS"

| "SIGNAL_TYPE_UNENCRYPTED_CONNECTIONS"

| "SIGNAL_TYPE_NO_ROOT_PASSWORD"

| "SIGNAL_TYPE_WEAK_ROOT_PASSWORD"

| "SIGNAL_TYPE_ENCRYPTION_KEY_NOT_CUSTOMER_MANAGED"

| "SIGNAL_TYPE_SERVER_AUTHENTICATION_NOT_REQUIRED"

| "SIGNAL_TYPE_EXPOSED_BY_OWNERSHIP_CHAINING"

| "SIGNAL_TYPE_EXPOSED_TO_EXTERNAL_SCRIPTS"

| "SIGNAL_TYPE_EXPOSED_TO_LOCAL_DATA_LOADS"

| "SIGNAL_TYPE_CONNECTION_ATTEMPTS_NOT_LOGGED"

| "SIGNAL_TYPE_DISCONNECTIONS_NOT_LOGGED"

| "SIGNAL_TYPE_LOGGING_EXCESSIVE_STATEMENT_INFO"

| "SIGNAL_TYPE_EXPOSED_TO_REMOTE_ACCESS"

| "SIGNAL_TYPE_DATABASE_NAMES_EXPOSED"

| "SIGNAL_TYPE_SENSITIVE_TRACE_INFO_NOT_MASKED"

| "SIGNAL_TYPE_PUBLIC_IP_ENABLED"

| "SIGNAL_TYPE_IDLE"

| "SIGNAL_TYPE_OVERPROVISIONED"

| "SIGNAL_TYPE_HIGH_NUMBER_OF_OPEN_TABLES"

| "SIGNAL_TYPE_HIGH_NUMBER_OF_TABLES"

| "SIGNAL_TYPE_HIGH_TRANSACTION_ID_UTILIZATION"

| "SIGNAL_TYPE_UNDERPROVISIONED"

| "SIGNAL_TYPE_OUT_OF_DISK"

| "SIGNAL_TYPE_SERVER_CERTIFICATE_NEAR_EXPIRY"

| "SIGNAL_TYPE_DATABASE_AUDITING_DISABLED"

| "SIGNAL_TYPE_RESTRICT_AUTHORIZED_NETWORKS"

| "SIGNAL_TYPE_VIOLATE_POLICY_RESTRICT_PUBLIC_IP"

| "SIGNAL_TYPE_QUOTA_LIMIT"

| "SIGNAL_TYPE_NO_PASSWORD_POLICY"

| "SIGNAL_TYPE_CONNECTIONS_PERFORMANCE_IMPACT"

| "SIGNAL_TYPE_TMP_TABLES_PERFORMANCE_IMPACT"

| "SIGNAL_TYPE_TRANS_LOGS_PERFORMANCE_IMPACT"

| "SIGNAL_TYPE_HIGH_JOINS_WITHOUT_INDEXES"

| "SIGNAL_TYPE_SUPERUSER_WRITING_TO_USER_TABLES"

| "SIGNAL_TYPE_USER_GRANTED_ALL_PERMISSIONS"

| "SIGNAL_TYPE_DATA_EXPORT_TO_EXTERNAL_CLOUD_STORAGE_BUCKET"

| "SIGNAL_TYPE_DATA_EXPORT_TO_PUBLIC_CLOUD_STORAGE_BUCKET"

| "SIGNAL_TYPE_WEAK_PASSWORD_HASH_ALGORITHM"

| "SIGNAL_TYPE_NO_USER_PASSWORD_POLICY"

| "SIGNAL_TYPE_HOT_NODE"

| "SIGNAL_TYPE_NO_POINT_IN_TIME_RECOVERY"

| "SIGNAL_TYPE_RESOURCE_SUSPENDED"

| "SIGNAL_TYPE_EXPENSIVE_COMMANDS"

| "SIGNAL_TYPE_NO_MAINTENANCE_POLICY_CONFIGURED"

| "SIGNAL_TYPE_NO_DELETION_PROTECTION"

| "SIGNAL_TYPE_INEFFICIENT_QUERY"

| "SIGNAL_TYPE_READ_INTENSIVE_WORKLOAD"

| "SIGNAL_TYPE_MEMORY_LIMIT"

| "SIGNAL_TYPE_MAX_SERVER_MEMORY"

| "SIGNAL_TYPE_LARGE_ROWS"

| "SIGNAL_TYPE_HIGH_WRITE_PRESSURE"

| "SIGNAL_TYPE_HIGH_READ_PRESSURE"

| "SIGNAL_TYPE_ENCRYPTION_ORG_POLICY_NOT_SATISFIED"

| "SIGNAL_TYPE_LOCATION_ORG_POLICY_NOT_SATISFIED";

state?:

| "STATE_UNSPECIFIED"

| "ACTIVE"

| "RESOLVED"

| "MUTED";

}

§Properties

additionalMetadata?: {

[key: string]: any;

}

[src]

Any other additional metadata

compliance?: Compliance[]

[src]

Industry standards associated with this signal; if this signal is an issue, that could be a violation of the associated industry standard(s). For example, AUTO_BACKUP_DISABLED signal is associated with CIS GCP 1.1, CIS GCP 1.2, CIS GCP 1.3, NIST 800-53 and ISO-27001 compliance standards. If a database resource does not have automated backup enable, it will violate these following industry standards.

description?: string

[src]

Description associated with signal

eventTime?: Date

[src]

Required. The last time at which the event described by this signal took place

externalUri?: string

[src]

The external-uri of the signal, using which more information about this signal can be obtained. In GCP, this will take user to SCC page to get more details about signals.

location?: string

[src]

This is used to identify the location of the resource. Example: "us-central1"

name?: string

[src]

Required. The name of the signal, ex: PUBLIC_SQL_INSTANCE, SQL_LOG_ERROR_VERBOSITY etc.

[src]

Cloud provider name. Ex: GCP/AWS/Azure/OnPrem/SelfManaged

resourceContainer?: string

[src]

Closest parent container of this resource. In GCP, 'container' refers to a Cloud Resource Manager project. It must be resource name of a Cloud Resource Manager project with the format of "provider//", such as "projects/123". For GCP provided resources, number should be project number.

resourceName?: string

[src]

Required. Database resource name associated with the signal. Resource name to follow CAIS resource_name format as noted here go/condor-common-datamodel

[src]

Required. The class of the signal, such as if it's a THREAT or VULNERABILITY.

signalId?: string

[src]

Required. Unique identifier for the signal. This is an unique id which would be mainatined by partner to identify a signal.

signalSeverity?: "SIGNAL_SEVERITY_UNSPECIFIED" | "CRITICAL" | "HIGH" | "MEDIUM" | "LOW"

[src]

The severity of the signal, such as if it's a HIGH or LOW severity.

[src]

Required. Type of signal, for example, AVAILABLE_IN_MULTIPLE_ZONES, LOGGING_MOST_ERRORS, etc.

state?: "STATE_UNSPECIFIED" | "ACTIVE" | "RESOLVED" | "MUTED"

[src]