OCI Multicloud Architect Associate flashcards
OCI Multicloud Architect Associate · Build recall with a focused review session.
33 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Oracle Database@Azure
- Oracle Exadata and Base Database Service running in Azure data centers, provisioned and billed through Azure Marketplace while OCI IAM and OCI Console govern the database resources.
- Oracle Database@AWS
- Exadata infrastructure colocated in AWS Availability Zones and connected via OCI-AWS Interconnect, with AWS billing for the database and OCI controlling Exadata and IAM.
- Oracle Database@Google Cloud
- Oracle Exadata deployed in Google Cloud regions using Google Cloud Cross-Cloud Interconnect, with Google Cloud Marketplace billing and OCI-managed infrastructure and identity.
- Multicloud tenancy
- A single OCI tenancy that hosts resources across OCI regions and connects to one or more partner clouds, forming the root of IAM, compartment, and budget hierarchy.
- Shared responsibility model
- Division of duties where the partner cloud owns its physical and hypervisor layer, OCI owns Exadata and database patching, and the customer owns data, IAM policy, and network configuration.
- Region adjacency
- Placing the OCI database in the OCI region nearest the partner cloud region to minimize interconnect round-trip latency, typically single-digit milliseconds within a metro.
- OCI-Azure Interconnect
- A dedicated private link between an OCI region and an Azure region, provisioned in the OCI Console under Networking and represented as a FastConnect virtual circuit.
- OCI-AWS Interconnect
- A private dedicated connection between OCI and AWS ordered through both clouds, requiring a cross-connect at the meet-me point and BGP peering with the OCI DRG.
- Cross-Cloud Interconnect
- Google Cloud's dedicated interconnect product used for Oracle Database@Google Cloud, pairing a Google VLAN attachment with an OCI FastConnect virtual circuit.
- Virtual circuit
- The logical FastConnect construct carrying multicloud traffic, defined by a VLAN, a BGP session, and a bandwidth setting such as 1, 2, 5, or 10 Gbps.
- Dynamic Routing Gateway
- The OCI VCN attachment point that peers via BGP with the partner cloud over the interconnect and receives routes for the partner cloud CIDR.
- CIDR non-overlap rule
- OCI VCN, partner VPC or VNet, and on-premises CIDR ranges must not overlap, because overlapping prefixes break BGP route installation and silently black-hole traffic.
- BGP ASN planning
- Assign distinct private ASNs to the OCI DRG and the partner cloud, and avoid collisions with on-premises ASNs so that BGP sessions establish and routes install correctly.
- OCI IAM authority
- OCI IAM is the authoritative identity and authorization plane for Oracle Database@ services across all partner clouds, regardless of which console provisions the resource.
- Identity Domains
- OCI's identity provider construct that supports SAML 2.0 and OIDC federation with Microsoft Entra ID, AWS IAM Identity Center, and Google Workspace, configured per domain.
- Compartment authorization boundary
- Compartments scope OCI policies; cross-cloud access is granted by adding a federated partner-cloud group to an OCI group and attaching a policy in the target compartment.
- Policy verb hierarchy
- OCI policy verbs rank inspect below read below use below manage, where manage includes all lower verbs; use grants consumption and manage grants creation and deletion.
- Dynamic groups
- OCI groups whose membership is defined by matching rules such as instance compartment OCID, functioning like AWS IAM roles for EC2 instance-principal access.
- Federation trust direction
- The partner cloud acts as SAML identity provider and OCI as service provider; the assertion carries group membership that OCI policies match for authorization.
- Policy conditions
- OCI IAM policy clauses using request.principal.type, request.region, or target.compartment.id to restrict federated partner-cloud principals to specific compartments or regions.
- Partner role mapping
- Translating partner-cloud roles such as Azure Owner or AWS AdministratorAccess to OCI groups, avoiding overlap with OCI tenancy-admin to preserve least privilege.
- Private SQL*Net path
- Oracle Database@ services are reached from partner-cloud applications over the private interconnect using TCPS on port 1521, never over the public internet.
- TDE on Database@
- Transparent Data Encryption is mandatory for Oracle Database@ services, with master keys held in OCI Vault or an external key manager that must be reachable at startup.
- Cross-cloud Data Guard
- A primary in a partner cloud and a standby in an OCI region or another partner cloud, transporting redo over the interconnect for cross-cloud disaster recovery.
- Active Data Guard offload
- A read-only standby that serves reporting and analytics queries, keeping analytical traffic off the primary OLTP database in a multicloud deployment.
- Autonomous Database placement
- Autonomous Database is OCI-native and reached from partner clouds over the interconnect or a private endpoint; it is not deployed inside partner data centers.
- GoldenGate replication
- Logical replication between Oracle Database@ services and other databases, used for zero-downtime migration and active-active data distribution across clouds.
- OCI Audit
- The OCI service recording all API calls against OCI resources including Oracle Database@ services, streamable to OCI Streaming or Object Storage for retention.
- VCN flow logs
- Logs capturing traffic through the DRG and interconnect virtual circuits, used to detect unexpected cross-cloud paths and verify that database traffic stays private.
- Cloud Guard
- OCI's posture management service that detects misconfigurations such as public buckets and overly broad IAM policies using detector and responder recipes scoped to compartments.
- Security Zones
- OCI compartments created with an enforced maximum-security posture, such as no public buckets and no public IPs, applied at creation time.
- Multicloud cost reporting
- Joining OCI Budgets and Cost Analysis data with partner-cloud marketplace invoices, because Oracle Database@ charges appear on the partner cloud bill.
- External key management
- Using OCI Vault with an external key manager to bring keys from a partner-cloud HSM for TDE master key custody, with rotation on a defined schedule.