v2.8.2

April 18, 2024 Release Notes - 2.8.2

1. New OBP for Certificate Service Certificate Expiration
2. OCI CIS Landing Zone Oracle Access Governance Support
3. Updates/Fixes to the Terraform
4. Updates/Fixes to the CIS Compliance Script

New OBP for Certificate Service Certificate Expiration

A new Oracle Best Practice (OBP) check scans certificates stored in the OCI Certificate Service and finds those that will expire in under 30 days. This check will help customers prevent unintended outages for OCI Services using certificates stored in the certificate service that expires before causing connectivity errors.

OCI CIS Landing Zone Oracle Access Governance Support

The OCI CIS Landing Zone enables accelerated Oracle Access Governance (OAG) deployment. The policies and groups required for OAG are created and aligned with the OCI CIS Foundations Benchmark. To deploy OAG using the CIS Landing Zone, review the Oracle Access Governance section under Governance in the Deployment Guide.

Updates/Fixes to the Terraform

Fixes

• Fixed the issue when deploying the CIS Landing Zone to other realms. Issue 140

Updates/Fixes to the CIS Compliance Script

Updates

• Added support to override https://cloud.oracle.com in deep link URLs in CSV reports with a customer provided deep link URL using the --deeplink-url-override argument. This provides support for other realms. The following --deeplink-url-override https://console.us-langley-1.oraclegovcloud.com will support OC2's Ashburn region.
• Added new actions attribute to OCI Event records.
• Added new compliance checking script FAQ item.