OCI Developer Professional key terms

The top-level Oracle Cloud Infrastructure account that owns all resources, users, and billing. It provides the root compartment and isolates your organization's cloud footprint from other customers.

A logical grouping of cloud resources used to organize, isolate, and control access. Compartments nest up to six levels deep, and policies applied to one are inherited by its children.

A geographically distinct area containing one or more data centers. Resources such as compute and block storage are regional, so you choose a home region and deploy services there.

An isolated data center or group of data centers within a region, with independent power and cooling. Distributing resources across availability domains improves resilience against localized failures.

A grouping of hardware within an availability domain that shares a single power source and network switch. Spreading instances across fault domains reduces correlated failure risk.

A human-readable statement granting groups permission to act on resources in compartments. Written in the form allow group X to verb resource-type in compartment Y, with optional conditions.

A group whose membership is defined by matching rules on resource attributes rather than manual assignment. Commonly used to let compute instances call other OCI services through instance principals.

An identity automatically assigned to a compute instance, letting code on that instance call OCI APIs without storing credentials. Authorization is governed by policies applied to the matching dynamic group.

An identity used by serverless resources, such as functions, to authenticate to OCI APIs. It removes the need to embed user credentials in code and is authorized through dynamic group policies.

An RSA key pair associated with a user, used to sign OCI REST API requests. The public key is uploaded to the console and the private key stays with the client application.

Oracle's command-line interface for managing OCI resources. It reads a configuration file containing tenancy, user, fingerprint, and key file details, and supports scripting common operations.

Language-specific libraries, such as Java, Python, and TypeScript, that wrap OCI REST APIs. They handle request signing, retries, and pagination so developers focus on application logic.

A container for objects in OCI Object Storage. Buckets have a storage tier, a namespace, and optional versioning, lifecycle rules, and pre-authenticated access settings.

A time-limited URL granting access to a bucket or object without requiring OCI credentials. Useful for sharing content with external parties or embedding downloads in applications.

A set of rules that automatically transition or delete objects based on age or prefix. Helps control storage cost by moving infrequently used data to cheaper tiers or expiring it.

A virtual machine running in OCI, created from an image and shaped by a flexible or fixed shape. It has a boot volume, optional block volumes, and a VNIC in a subnet.

A compute shape where you choose the number of OCPUs and memory independently within allowed limits. It lets you right-size instances and change resources later without recreating them.

Durable network-attached storage that you attach to a compute instance and format as a filesystem. Volumes persist independently of the instance lifecycle and support backups and cloning.

The volume containing the operating system image from which an instance starts. It can be preserved or deleted when the instance terminates, and can be cloned to launch new instances.

A Virtual Cloud Network is a software-defined network scoped to a region. It contains subnets, route tables, gateways, and security rules that control traffic for your resources.

A contiguous range of IP addresses within a VCN, tied to one availability domain or marked regional. Subnets can be public or private and carry their own security lists.

A set of stateless ingress and egress rules applied at the subnet level. Every instance in the subnet inherits the rules, which filter traffic by source, destination, and port.

A stateful set of firewall rules applied to a group of VNICs rather than a whole subnet. It enables fine-grained, per-workload traffic control independent of subnet layout.

A VCN component that enables traffic between public subnets and the internet. Instances using it need public IP addresses and matching route table and security rules.

A VCN gateway that lets instances in private subnets initiate outbound internet connections without exposing them to inbound traffic. Responses return through the same gateway.

A VCN gateway providing private access to supported OCI services, such as Object Storage, without traversing the internet. Traffic stays on Oracle's network and needs no public IP.

A serverless compute service where you deploy code as functions triggered by events or HTTP requests. Oracle manages scaling and infrastructure, and you pay only for execution time.

A managed service that exposes backend HTTP services, including Functions, through a single endpoint. It handles routing, authentication, rate limiting, and request transformation.

A self-driving Oracle database that automates patching, tuning, and scaling. It offers serverless and dedicated deployment options and connects through wallets or TLS.

A zip file containing credentials and connection descriptors for an Autonomous Database. Applications use it to establish mutually authenticated TLS connections without hardcoding secrets.

A securely stored credential or configuration value in OCI Vault, retrieved at runtime through the API. It keeps sensitive data out of source code and configuration files.

A managed Terraform service that provisions OCI infrastructure from declarative configurations. It tracks state, supports stacks and jobs, and can detect drift from the declared configuration.

A durable, scalable publish-subscribe messaging service for ingesting continuous data streams. Producers write records to a stream and consumers read them using partitions and cursors.

A serverless event routing service that reacts to resource state changes, such as object creation. Rules match event types and deliver them to targets like Functions or Notifications.

A managed messaging service for decoupling producers and consumers with at-least-once delivery. Messages are stored durably until consumed or expired, supporting retries and visibility timeouts.

A serverless compute option that runs a container image without managing underlying hosts. Suited to short-lived or bursty workloads that do not need full orchestration.

Oracle Container Engine for Kubernetes is a managed Kubernetes service. It provisions and upgrades control planes while you run worker nodes in your tenancy's VCN.

A managed continuous integration and delivery service with pipelines, build runners, and artifact repositories. It integrates with source control and deploys to OCI or on-premises targets.

A time-series measurement emitted by OCI resources, such as CPU utilization. Metrics feed alarms, which trigger notifications or actions when thresholds are breached.