Translate lab documentation to English
Some checks failed
Repo Quality / structure (push) Has been cancelled
Terraform Validate / validate (push) Has been cancelled

This commit is contained in:
Rodrigo Pace
2026-05-08 14:50:52 -03:00
parent cde150b705
commit 52bf971b8b
33 changed files with 939 additions and 702 deletions

View File

@@ -1,31 +1,31 @@
# Runbook - 07 Audit Evidence With Data Safe
## Objetivo
## Objective
Demonstrar como transformar acesso a dados sensiveis em evidencia auditavel usando Unified Audit e OCI Data Safe.
Show how to turn access to sensitive data into auditable evidence using Unified Audit and OCI Data Safe.
## Valor De Seguranca
## Security Value
- Mostra que prevencao precisa vir acompanhada de evidencia.
- Ajuda CISO, auditoria e compliance a acompanhar acesso a dados sensiveis.
- Demonstra como Data Safe complementa Deep Data Security com activity auditing e relatorios.
- Shows that prevention should be paired with evidence.
- Helps CISO, audit, and compliance teams monitor access to sensitive data.
- Demonstrates how Data Safe complements Oracle Deep Data Security with activity auditing and reporting.
## Pre-Requisitos
## Prerequisites
- Banco Oracle compativel com Unified Audit.
- OCI Data Safe habilitado na tenancy.
- Target database registrado ou pronto para registro no Data Safe.
- Permissoes para configurar Activity Auditing.
- Oracle Database compatible with Unified Audit.
- OCI Data Safe enabled in the tenancy.
- Target database registered, or ready to be registered, in Data Safe.
- Permissions to configure Activity Auditing.
## Antes - Ambiente Vulneravel
## Before - Vulnerable Environment
1. Limpe o cenario:
1. Reset the scenario:
```sql
@scenarios/07-audit-evidence-data-safe/sql/99_reset.sql
```
2. Crie tabela sensivel, dados e personas, sem auditoria customizada e sem data grants:
2. Create the sensitive table, data, and personas without custom auditing or data grants:
```sql
@scenarios/07-audit-evidence-data-safe/sql/00_schema.sql
@@ -33,7 +33,7 @@ Demonstrar como transformar acesso a dados sensiveis em evidencia auditavel usan
@scenarios/07-audit-evidence-data-safe/sql/02_identities.sql
```
3. Execute uma consulta ampla em pagamentos:
3. Run a broad payments query:
```sql
SELECT payment_id, customer_name, country, payment_amount, card_token, risk_flag
@@ -41,57 +41,57 @@ Demonstrar como transformar acesso a dados sensiveis em evidencia auditavel usan
ORDER BY payment_id;
```
## Resultado Esperado Antes
## Expected Result Before
- `CARD_TOKEN` pode ser consultado por quem tiver acesso amplo.
- A equipe pode ter dificuldade para provar rapidamente quem acessou a tabela e quando.
- Nao ha pacote claro de evidencia para auditoria.
- `CARD_TOKEN` can be queried by users with broad access.
- The team may struggle to quickly prove who accessed the table and when.
- There is no clear evidence package for audit.
## Depois - Aplicando Deep Data Security E Auditoria
## After - Applying Deep Data Security And Auditing
1. Aplique data grants:
1. Apply the data grants:
```sql
@scenarios/07-audit-evidence-data-safe/sql/03_data_grants.sql
```
2. Crie politicas de Unified Audit:
2. Create Unified Audit policies:
```sql
@scenarios/07-audit-evidence-data-safe/sql/04_audit_policies.sql
```
3. Gere atividade e consulte a trilha local:
3. Generate activity and query the local audit trail:
```sql
@scenarios/07-audit-evidence-data-safe/sql/05_generate_activity.sql
```
4. No OCI Data Safe:
4. In OCI Data Safe:
```text
Register Target Database
Configure Activity Auditing
Start audit trail collection for UNIFIED_AUDIT_TRAIL
Review Activity Auditing dashboard
Generate or export audit report
Review the Activity Auditing dashboard
Generate or export an audit report
```
## Resultado Esperado Depois
## Expected Result After
- `payment_operator` ve campos operacionais do Brasil, sem `card_token`.
- `auditor` ve dados necessarios para revisao.
- `UNIFIED_AUDIT_TRAIL` registra acesso a `DDS_AUDIT_PAYMENTS`.
- Data Safe coleta e apresenta os eventos em dashboards e relatorios.
- `payment_operator` sees operational Brazil payment fields without `card_token`.
- `auditor` sees the data required for review.
- `UNIFIED_AUDIT_TRAIL` records access to `DDS_AUDIT_PAYMENTS`.
- Data Safe collects and presents events in dashboards and reports.
## Evidencias Para Demo
## Demo Evidence
- Output de `UNIFIED_AUDIT_TRAIL`.
- Screenshot do target no Data Safe.
- Screenshot de Activity Auditing.
- Relatorio exportado do Data Safe, quando disponivel.
- Output from `UNIFIED_AUDIT_TRAIL`.
- Screenshot of the Data Safe target.
- Screenshot of Activity Auditing.
- Exported Data Safe report, when available.
## Referencias Oficiais
## Official References
- Oracle Data Safe Activity Auditing Overview: https://docs.oracle.com/en/cloud/paas/data-safe/udscs/activity-auditing-overview.html
- Oracle Deep Data Security Guide: https://docs.oracle.com/en/database/oracle/oracle-database/26/ddscg/index.html