Components ofIAM

IAMuses the components described in this section. To better understand how the components fit together, seeExample Scenario.

RESOURCE

The cloud objects that your company's employees create and use when interacting withOracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.

USER

An individual employee or system that needs to manage or use your company'sOracle Cloud Infrastructureresources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typicallyIAMusers. Users have one or moreIAMcredentials (seeUser Credentials).

GROUP

A collection of users who all need the same type of access to a particular set of resources or compartment.

DYNAMIC GROUP

A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as 'principal' actors and can make API calls to services according to policies that you write for the dynamic group.

NETWORK SOURCE

A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.

COMPARTMENT

A collection of related resources. Compartments are a fundamental component ofOracle Cloud Infrastructurefor organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, seeSetting Up Your Tenancy.

TENANCY

The root compartment that containsallof your organization'sOracle Cloud Infrastructureresources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are yourIAMentities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create.

POLICY

A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, seeExample ScenarioandHow Policies Work. The word 'policy' is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named 'policy' document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.

HOME REGION

The region where yourIAMresources reside. AllIAMresources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to yourIAMresources in your home region. The changes will be automatically propagated to all regions. For more information, seeManaging Regions.

FEDERATION

A relationship that an administrator configures between an identity provider and a service provider. When you federateOracle Cloud Infrastructurewith an identity provider, you manage users and groups in the identity provider. You manage authorization inOracle Cloud Infrastructure's IAM service.Oracle Cloud Infrastructuretenancies are federated with Oracle Identity Cloud Service by default.

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

OCIleverages advanced encryption that leads to fast performance, OCIdoes not over subscribe CPU, but only memory, and OCIhypervisor provides industry leading performance are WRONG.

However, OCI does back claims with SLAs and offers predictable pricing for all services.

https://www.oracle.com/in/cloud/pricing.html

Oracle Cloud Infrastructure is a set of complementary cloud services that enable you to build and run a wide range of applications and services in a highly available hosted environment. Oracle Cloud Infrastructure offers high-performance compute capabilities (as physical hardware instances) and storage capacity in a flexible overlay virtual network that is securely accessible from your on-premises network.

https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Concepts/baremetalintro.htm

One of the major benefits of cloud computing is REDUCEDTCO. Therefore, Increased TCOis the incorrect option.

A key benefit of using Oracle Cloud Infrastructure Autonomous Database is that it reduces database management overhead by automating tasks such as provisioning, patching, tuning, backup, recovery, and scaling.This allows customers to focus on their core business rather than database administration6