54
54
myOCID=$ii
55
55
myNAME=$( cat " ${myTEMPFILE} " | jq --raw-output ' .[] | [.[] | select(.' \" id\" ' ==' \" $ii \" ' )] | .[].' \" display-name\" ' ' )
56
56
if [ 0 -lt $( echo " ${myNAME} " | grep " ${FRANKFURT_BLOCK_VOLUME_NAME} " | wc -l) ] ; then
57
- BLOCK_VOLUME_OCID=${myOCID}
57
+ BLOCK_VOLUME_OCID=${myOCID}
58
58
echo " ${PF1} Block Volume name.........: ${myNAME} " >> " ${LOG_FILE} "
59
59
echo " ${PF1} Block Volume OCID.........: ${myOCID} " >> " ${LOG_FILE} "
60
60
fi
90
90
myOCID=$ii
91
91
myNAME=$( cat " ${myTEMPFILE} " | jq --raw-output ' .[] | [.[] | select(.' \" id\" ' ==' \" $ii \" ' )] | .[].' \" display-name\" ' ' )
92
92
if [ 0 -lt $( echo " ${myNAME} " | grep " ${FRANKFURT_BLOCK_VOLUME_NAME} Backup" | wc -l) ] ; then
93
- BLOCK_VOLUME_BACKUP_OCID=${myOCID}
93
+ BLOCK_VOLUME_BACKUP_OCID=${myOCID}
94
94
echo " ${PF1} Block Volume Backup name..: ${myNAME} " >> " ${LOG_FILE} "
95
95
echo " ${PF1} Block Volume Backup OCID..: ${myOCID} " >> " ${LOG_FILE} "
96
96
fi
@@ -107,8 +107,8 @@ if [ 1 -eq 1 ] ; then
107
107
color_print " ${IGreen} " " ($MYCOUNT ) $( date " +%d.%m.%Y %H:%M:%S" ) : $MYOUTPUT "
108
108
109
109
: ' ---------------------------------------------------------------------------------------------------------------------------------------
110
- Encrypt Data in Block Volumes https://docs.oracle.com/en/solutions/oci-best-practices/protect-data-rest1.html
111
- oci bv volume-kms-key update https://docs.oracle.com/en-us/iaas/tools/oci-cli/latest/oci_cli_docs/cmdref/bv/volume-kms-key/update.html
110
+ Encrypt Data in Block Volumes https://docs.oracle.com/en/solutions/oci-best-practices/protect-data-rest1.html
111
+ oci bv volume-kms-key update https://docs.oracle.com/en-us/iaas/tools/oci-cli/latest/oci_cli_docs/cmdref/bv/volume-kms-key/update.html
112
112
-------------------------------------------------------------------------------------------------------------------------------------------'
113
113
114
114
echo " Secure Storage with Customer managed Key" >> " ${LOG_FILE} "
125
125
color_print " ${MYcolor} " " ${PF1} BLOCK volume backup change from Oracle managed Key to Customer managed Key (coming soon)"
126
126
if [ 1 -eq 0 ] ; then # BLOCK volume backup change from Oracle managed Key to Customer managed Key (coming soon)
127
127
: ' ---------------------------------------------------------------------------------------------------------------------------------------
128
- Backup Data in Storage Services https://docs.oracle.com/en/solutions/oci-best-practices/back-your-data1.html
128
+ Backup Data in Storage Services https://docs.oracle.com/en/solutions/oci-best-practices/back-your-data1.html
129
129
-------------------------------------------------------------------------------------------------------------------------------------------'
130
130
oci --profile " ${REGION_PROFILE} " bv backup-kms-key update --volume-id " ${BLOCK_VOLUME_BACKUP_OCID} " --kms-key-id " ${MasterEncryptionKey_OCID} "
131
131
@@ -139,8 +139,8 @@ if [ 1 -eq 1 ] ; then # Rotation of Customer managed Key
139
139
: ' ---------------------------------------------------------------------------------------------------------------------------------------
140
140
Periodically rotating keys limits the amount of data
141
141
encrypted or signed by one key version. If a key is
142
- ever compromised, key rotation thus reduces the risk. https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm#concepts
143
- kms management key-version create https://docs.oracle.com/en-us/iaas/tools/oci-cli/latest/oci_cli_docs/cmdref/kms/management/key-version/create.html
142
+ ever compromised, key rotation thus reduces the risk. https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm#concepts
143
+ kms management key-version create https://docs.oracle.com/en-us/iaas/tools/oci-cli/latest/oci_cli_docs/cmdref/kms/management/key-version/create.html
144
144
-------------------------------------------------------------------------------------------------------------------------------------------'
145
145
146
146
oci --profile " ${REGION_PROFILE} " kms management key-version create --key-id " ${MasterEncryptionKey_OCID} " --endpoint " ${ManagementEndpoint} " --wait-for-state " ENABLED"
0 commit comments