Recent Posts by Pulkit Sharma

CIS OCI Landing Zone quick start template provides OCI customers a quick, easy and secure way of designing their tenancy that complies with CIS OCI Foundations Benchmark v1.1 and follows OCI best practices for architecting a tenancy. The quick start template is provided in the form of sample terraform and Python code. Depending on what best fits your use-cases and development practices, it could be used as provided, extended and built upon or also as a guide to...

CIS OCI Landing Zone quick start template provides OCI customers a quick, easy and secure way of designing their tenancy that complies with CIS OCI Foundations Benchmark v1.1 and follows OCI best practices for architecting a tenancy. The quick start template is provided in the form of sample Terraform and Python code. Depending on what best fits your use cases and development practices, it could be used as provided, extended and built upon or could also be used as a guide to...

Oracle Cloud Guard service was released recently. It helps customers monitor their OCI resources and maintain a strong security posture. For people who are new to Cloud Guard, following are some resources for learning about Cloud Guard concepts and use-cases: Oracle Cloud Guard Oracle Cloud Guard Service Documentation And some blog posts: Automating Cloud Security with Security Posture Management Discovering and fixing weak cloud security posture with Oracle Cloud Guard How Oracle...

Introduction Customers could use Oracle Cloud Infrastructure (OCI) Alarms to notify their IT staff about events happening in their environment that need attention. Some customers have a central service management system (also known as ticketing system) where they track and manage all such events via alerts and tickets. I recently helped a customer with a solution for managing OCI alarms in their ServiceNow system which is one of the popular service management systems. I think...

Oracle Cloud Infrastructure (OCI) Monitoring Service provides a convenient way of accessing metric data for multiple OCI services (listed in “Supported Services” section of the Monitoring Overview page). OCI customers can access metric data in multiple ways – in OCI console or by using the Grafana Plug-in for creating dashboards for querying and displaying monitoring data in graphical format or by using SDKs/APIs. New features for OCI are being released at a very fast pace. Ora...

Oracle CASB Cloud Service (hereafter referred to as CASB) quickly gives you visibility into security of your cloud applications and services to help ensure that your critical data is secure. CASB provides these capabilities by frequently pulling in audit log information from various supported cloud services, analyzing them, running machine learning algorithms on them and generating risk events. Customers’ SOC could view and analyze these risk events to take appropriate...

Customers can use Oracle CASB Cloud Service (hereafter referred to as CASB) to monitor and gain deeper visibility into their OCI environments to protect against security threats. CASB supports security monitoring of a rich set of cloud applications. This link describes the set of applications that CASB can monitor and how to prepare them for monitoring. This post is focused on OCI as a target application for CASB. CASB provides some capabilities out-of-the box for all...

One of the responsibilities of Oracle Identity Cloud Service (IDCS) is to serve as an OAuth 2.0 Authorization Server. As an Authorization Server, IDCS issues access and refresh tokens to OAuth Clients. OAuth Clients use these tokens to access various resources on Resource Servers on-behalf of Resource Owners. OAuth Clients are things like web or mobile applications and Resource Owners are users who use those applications for various purposes. This goal of this article is to...

REST APIs for Oracle Identity Manager (OIM) 11g R2 PS3 were released recently. The availability of REST APIs enables a variety of newer integrations with the product in addition to already available mechanisms using Java APIs. In this article, we discuss various ways of accessing these REST APIs in a secure manner. Please note that irrespective of how users' authenticate to OIM, what data can they access and what actions can they perform depends only on OIM's authorization...