Skip to main content

๐Ÿง  Oracle IAAS Block Volume is not encrypted with a customer managed key - prod.logic.yaml๐ŸŸข

Usesโ€‹

Test Results ๐ŸŸขโ€‹

Generated at: 2026-05-02T12:07:20.371137260Z Open

ResultIdCondition IndexCondition TextRuntime Error
๐ŸŸขtest1โœ”๏ธ 99โœ”๏ธ isDisappeared(CA10O1__disappearanceTime__c)โœ”๏ธ null
๐ŸŸขtest2โœ”๏ธ 199โœ”๏ธ not(setOfText(['caOracleIaasBlockVolume']).contains(RecordType.DeveloperName))โœ”๏ธ null
๐ŸŸขtest3โœ”๏ธ 299โœ”๏ธ extract('CA10O1__lifecycleState__c') != 'AVAILABLE'โœ”๏ธ null
๐ŸŸขtest4โœ”๏ธ 399โœ”๏ธ extract('CA10O1__kmsKeyOcid__c').isNotEmpty()โœ”๏ธ null
๐ŸŸขtest5โœ”๏ธ 400โœ”๏ธ otherwiseโœ”๏ธ null

Generation Bundleโ€‹

FileMD5
Open/ce/ca/oracle/compute/block-volume-cmk-encryption/policy.yamlBF7468CF868E05BAB9C0036D3E86ED26
Open/ce/ca/oracle/compute/block-volume-cmk-encryption/prod.logic.yamlCDD8B91348BD02858EC9FB266F98411E
Open/ce/ca/oracle/compute/block-volume-cmk-encryption/test-data.json041FB0E49F9709B9042E87F84E81E1D2
Open/types/CA10O1__CaOracleIaasVolume__c/object.extracts.yaml29D15263C90A3304C9D8774185E00633

Available Commandsโ€‹

repo-manager policies generate FULL /ce/ca/oracle/compute/block-volume-cmk-encryption/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/oracle/compute/block-volume-cmk-encryption/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/oracle/compute/block-volume-cmk-encryption/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/oracle/compute/block-volume-cmk-encryption/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/oracle/compute/block-volume-cmk-encryption/prod.logic.yaml

Contentโ€‹

Open File

---
inputType: "CA10O1__CaOracleIaasVolume__c"
recordTypes:
- "caOracleIaasBlockVolume"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10O1__CaOracleIaasVolume__c/object.extracts.yaml"
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The block volume is not available."
check:
NOT_EQUAL:
left:
EXTRACT: "CA10O1__lifecycleState__c"
right:
TEXT: "AVAILABLE"
- status: "COMPLIANT"
currentStateMessage: "The block volume is encrypted with a customer managed key."
check:
NOT_EMPTY:
arg:
EXTRACT: "CA10O1__kmsKeyOcid__c"
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "The block volume is not encrypted with a customer managed key."
remediationMessage: "Configure the block volume to use a customer managed key from OCI Vault."