Oracle Cloud

Oracle Cloud is a computing service providing servers, storage, network, applications and services.

Related Enforcement Actions:

• Oracle Cloud - Start or Stop Compute Instances

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users
• Groups
• Compute Services
• Load Balancers
• Databases
• Compute Images
• Application Resources
• Firewall Rules

Parameters

1. User OCID - Specify the Oracle Cloud Identifier (OCID) for the Axonius user. For more details on User OCID, see Oracle Cloud Infrastructure Documentation - Where to Get the Tenancy's OCID and User's OCID.

2. Oracle Key File - Upload an RSA key pair in PEM format (minimum 2048 bits). For more details on generating such key, see Oracle Cloud Infrastructure Documentation - How to Generate an API Signing Key.

3. Key-Pair Fingerprint - Specify the key fingerprint. To get the key fingerprint, you need to upload the PEM public key in the Oracle Cloud console. For more details, see Oracle Cloud Infrastructure Documentation - How to Upload the Public Key.

4. Tenancy OCID - Specify your tenancy Oracle Cloud Identifier (OCID). For more details on User OCID, see Oracle Cloud Infrastructure Documentation - Where to Get the Tenancy's OCID and User's OCID.

5. Oracle Cloud Infrastructure Region - Specify your Region Identifier. For the complete region list, see Oracle Cloud Infrastructure Documentation - Regions and Availability Domains.

6. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

7. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

8. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Oracle Cloud services to fetch as devices - Select the Oracle Cloud services to fetch as devices. Select from VM Clusters, Database Service, Kubernetes Clusters, Auto Scaling Groups, Network Firewall and Load Balancers.
2. List of tags to parse as fields - Enter a comma-separated list of tag keys to be saved as fields.

Required Permissions

To fetch information from Oracle Cloud API, you first need to create a user for Axonius, and put that user in at least one IAM group with any desired read-only permissions. For more details, see Oracle Cloud Infrastructure Documentation - Adding Users.

To add the appropriate permissions for the type of data you want to fetch, follow these steps on your Oracle console:

1. From the left hand navigation menu, select Identity & Security > Policies.
2. Use the compartment selector at the top of the Policies page to select which compartment you want to apply the policy to. For tenancy-wide policies, you usually need to select the root compartment.
3. After adding the appropriate compartment, you need to add permissions to the policy. Either select an existing policy to edit or click Create Policy to create a new one.
4. In the Policy Editor, add a Policy Statement - for example, Allow group Admins to read users in tenancy. Then, click Create or Save Changes.

All the permissions and policy statements you can add are listed below.