🧠 Oracle Key Vault Customer Managed Key is not rotated annually - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/oracle/key-vault/cmk-not-rotated-annually/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 Oracle Key Vault Key
• 🔌 Oracle Key Vault Key - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2026-09-22T15:07:58.276746418Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 199	✔️ extract('CA10O1__lifecycleState__c') != 'ENABLED'	✔️ null
🟢	test2	✔️ 499	✔️ extract('CA10O1__timeCreated__c').beyondLastDays(365)	✔️ null
🟢	test3	✔️ 599	✔️ extract('CA10O1__timeCreated__c').withinLastDays(365)	✔️ null
🟢	test4	✔️ 101	✔️ CA10O1__lifecycleState__c.isEmpty()	✔️ null
🟢	test5	✔️ 401	✔️ CA10O1__timeCreated__c.isEmpty()	✔️ null
🟢	test6	✔️ 299	✔️ extract('CA10O1__autoRotationStatus__c') == 'Enabled'	✔️ null
🟢	test7	✔️ 399	✔️ extract('CA10O1__autoRotationStatus__c').isEmpty() && extract('CA10O1__timeCreated__c').beyondLastDays(365)	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/oracle/key-vault/cmk-not-rotated-annually/policy.yaml	64D772524BC93D8F0175A66F99E85E0C
Open	/ce/ca/oracle/key-vault/cmk-not-rotated-annually/prod.logic.yaml	424FAD81E26795EFC7C020B9C6F29000
Open	/ce/ca/oracle/key-vault/cmk-not-rotated-annually/test-data.json	81AE9677C853994134D2453B791C83A5
Open	/types/CA10O1__CaOracleKeyVaultKey__c/object.extracts.yaml	76A17E80E68AAB1D3923971BBD0B747C

Available Commands

repo-manager policies generate FULL /ce/ca/oracle/key-vault/cmk-not-rotated-annually/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/oracle/key-vault/cmk-not-rotated-annually/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/oracle/key-vault/cmk-not-rotated-annually/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/oracle/key-vault/cmk-not-rotated-annually/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/oracle/key-vault/cmk-not-rotated-annually/prod.logic.yaml

Content

Open File

---
inputType: "CA10O1__CaOracleKeyVaultKey__c"
testData:
  - file: "test-data.json"
importExtracts:
  - file: "/types/CA10O1__CaOracleKeyVaultKey__c/object.extracts.yaml"
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "This Oracle Key Vault key is not enabled."
    check:
      NOT_EQUAL:
        left:
          EXTRACT: "CA10O1__lifecycleState__c"
        right:
          TEXT: "ENABLED"
  - status: "COMPLIANT"
    currentStateMessage: "Automatic rotation is enabled for this Oracle Key Vault key."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10O1__autoRotationStatus__c"
        right:
          TEXT: "Enabled"
  - status: "UNDETERMINED"
    currentStateMessage: "Unable to determine the automatic rotation status for this stale Oracle Key Vault key."
    check:
      AND:
        args:
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10O1__autoRotationStatus__c"
          - IS_BEYOND_LAST_DAYS:
              arg:
                EXTRACT: "CA10O1__timeCreated__c"
              offsetDays: 365
  - status: "INCOMPLIANT"
    currentStateMessage: "This Oracle Key Vault key is older than 365 days and automatic rotation is not enabled."
    remediationMessage: "Rotate this Oracle Key Vault key or enable automatic key rotation."
    check:
      IS_BEYOND_LAST_DAYS:
        arg:
          EXTRACT: "CA10O1__timeCreated__c"
        offsetDays: 365
  - status: "COMPLIANT"
    currentStateMessage: "This Oracle Key Vault key is enabled and was created within the last 365 days."
    check:
      IS_WITHIN_LAST_DAYS:
        arg:
          EXTRACT: "CA10O1__timeCreated__c"
        offsetDays: 365
otherwise:
  status: "UNDETERMINED"
  currentStateMessage: "Unable to determine whether this Oracle Key Vault key is rotated annually."