Reader small image

You're reading from  Oracle Cloud Infrastructure for Solutions Architects

Product typeBook
Published inOct 2021
PublisherPackt
ISBN-139781800566460
Edition1st Edition
Right arrow
Author (1)
Prasenjit Sarkar
Prasenjit Sarkar
author image
Prasenjit Sarkar

Prasenjit Sarkar is a product manager at Oracle for their public cloud, with a focus on cloud strategy, Oracle Ravello, cloud-native applications, and the API platform. His primary focus is driving Oracle's cloud computing business with commercial and public sector customers, helping to shape and deliver a strategy to build broad use of Oracle's Infrastructure as a Service offerings, such as Compute, Storage, and Database as a Service. He is also responsible for developing public/private cloud integration strategies, customers' cloud computing architecture visions, future state architectures, and implementable architecture roadmaps in the context of the public, private, and hybrid cloud computing solutions that Oracle can offer. He has also authored six industry-leading books on virtualization, SDN, and physical compute, among others. He has six successful patents and six more patents pending at the US PTO. He has also authored numerous research articles.
Read more about Prasenjit Sarkar

Right arrow

Using instance principals to make a call to the OCI API

Instance principals enable OCI instances to make API calls against other OCI services. Using instance principals, you can make OCI calls without the need to configure user credentials or a configuration file.

Even without instance principals, you can still achieve this by storing API credentials on each instance. However, then, you will be faced with a credential rotation problem. Additionally, auditing at the instance level is impossible since credentials are the same across hosts.

So, the ideal solution is to use instance principals that give instances their own identity. The instances that have instance principals configured become a new type of principal, and this is in addition to the existing OCI IAM user/group.

To implement an instance principal, you need to use dynamic groups, which allow policies to be defined on instances. An instance principal implements API authentication at the instance level, removing the...

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
Oracle Cloud Infrastructure for Solutions Architects
Published in: Oct 2021Publisher: PacktISBN-13: 9781800566460

Author (1)

author image
Prasenjit Sarkar

Prasenjit Sarkar is a product manager at Oracle for their public cloud, with a focus on cloud strategy, Oracle Ravello, cloud-native applications, and the API platform. His primary focus is driving Oracle's cloud computing business with commercial and public sector customers, helping to shape and deliver a strategy to build broad use of Oracle's Infrastructure as a Service offerings, such as Compute, Storage, and Database as a Service. He is also responsible for developing public/private cloud integration strategies, customers' cloud computing architecture visions, future state architectures, and implementable architecture roadmaps in the context of the public, private, and hybrid cloud computing solutions that Oracle can offer. He has also authored six industry-leading books on virtualization, SDN, and physical compute, among others. He has six successful patents and six more patents pending at the US PTO. He has also authored numerous research articles.
Read more about Prasenjit Sarkar