The CloudQuery Opal Security plugin pulls data from Opal and loads it into any supported CloudQuery destination
Publisher
cloudquery
Latest version
v1.0.1
Type
Source
Platforms
Date Published
Loading plugin documentation
CloudQuery's use of cookies
We use tracking cookies to understand how you use the product and help us improve it. Your consent is required before we can enable these cookies. You can opt out via the link in the footer.
token field in the spec. We recommend reading it from an
environment variable (for example OPAL_TOKEN) rather than hard-coding it in the configuration file.kind: source
spec:
name: "opalsecurity"
path: "cloudquery/opalsecurity"
registry: "cloudquery"
version: "v1.0.1"
tables: ["*"]
destinations: ["postgresql"]
spec:
token: "${OPAL_TOKEN}"
# Optional. The Opal API host to connect to; defaults to "api.opal.dev".
# Set this to target a region-specific or self-hosted Opal environment.
# domain: "api.opal.dev"
token (string) (required)concurrency (integer) (optional) (default: 10)select user_id, email, full_name, position from opalsecurity_users;
select email, full_name, hr_idp_status
from opalsecurity_users
where hr_idp_status in ('SUSPENDED', 'DEPROVISIONED');
select name, resource_type, risk_sensitivity
from opalsecurity_resources
where is_requestable is true
order by risk_sensitivity;
select resource_type, count(*) as resource_count
from opalsecurity_resources
group by resource_type
order by resource_count desc;
select name, group_type, admin_owner_id
from opalsecurity_groups
where auto_approval is true;
select r.name as resource_name, r.resource_type, o.name as owner_name
from opalsecurity_resources r
join opalsecurity_owners o on o.owner_id = r.admin_owner_id
order by o.name;
select a.name as app_name, a.app_type, count(r.resource_id) as resource_count
from opalsecurity_apps a
left join opalsecurity_resources r on r.app_id = a.app_id
group by a.name, a.app_type
order by resource_count desc;
select actor_email, count(*) as event_count
from opalsecurity_events
where created_at > now() - interval '30 days'
group by actor_email
order by event_count desc
limit 20;
select event_type, count(*) as event_count
from opalsecurity_events
group by event_type
order by event_count desc;
select name, resource_type
from opalsecurity_resources
where require_mfa_to_connect is true;