section_5.sp

locals {
  cis_v120_5_common_tags = merge(local.cis_v120_common_tags, {
    cis_section_id = "5"
  })
}

benchmark "cis_v120_5" {
  title         = "5 Asset Management"
  documentation = file("./cis_v120/docs/cis_v120_5.md")
  children = [
    control.cis_v120_5_1,
    control.cis_v120_5_2,
  ]

  tags = merge(local.cis_v120_5_common_tags, {
    service = "OCI/Identity"
    type    = "Benchmark"
  })
}

control "cis_v120_5_1" {
  title         = "5.1 Create at least one compartment in your tenancy to store cloud resources"
  description   = "When you sign up for Oracle Cloud Infrastructure, Oracle creates your tenancy, which is the root compartment that holds all your cloud resources. You then create additional compartments within the tenancy (root compartment) and corresponding policies to control access to the resources in each compartment."
  query         = query.identity_tenancy_with_one_active_compartment
  documentation = file("./cis_v120/docs/cis_v120_5_1.md")

  tags = merge(local.cis_v120_5_common_tags, {
    cis_item_id = "5.1"
    cis_level   = "1"
    cis_type    = "manual"
    service     = "OCI/Identity"
  })
}

control "cis_v120_5_2" {
  title         = "5.2 Ensure no resources are created in the root compartment"
  description   = "When you create a cloud resource such as an instance, block volume, or cloud network, you must specify to which compartment you want the resource to belong. Placing resources in the root compartment makes it difficult to organize and isolate those resources."
  query         = query.manual_control
  documentation = file("./cis_v120/docs/cis_v120_5_2.md")

  tags = merge(local.cis_v120_5_common_tags, {
    cis_item_id = "5.2"
    cis_level   = "1"
    cis_type    = "manual"
    service     = "OCI/Identity"
  })
}