Oracle Cloud Infrastructure Architect Associate key terms

A logical container inside a tenancy used to group and isolate related cloud resources so that access policies, quotas, and cost tracking can be applied at a granular level.

The root container that represents an entire Oracle Cloud account; it holds all compartments, users, and resources, and its home region determines where global identity resources live.

A human-readable statement granting a group permission to perform a set of verbs on a resource type in a compartment, evaluated to allow or deny access requests.

A group whose membership is defined by matching rules on instance or resource attributes, letting workloads such as compute instances obtain permissions without stored credentials.

An identity automatically assumed by a compute instance that belongs to a dynamic group, enabling the software on that instance to call OCI APIs without embedding user credentials.

Integration between the tenancy and an external identity provider so users authenticate with corporate credentials and receive OCI access through mapped groups and policies.

The region chosen when a tenancy is created; it hosts the primary identity data and some global services, and it cannot be changed after creation.

A customizable private network in a region that contains subnets, route tables, gateways, and security rules, forming the foundation for all cloud resource connectivity.

A contiguous range of IP addresses within a VCN that is bound to a single availability domain or is regional, and that carries its own route table and security list.

A highly available VCN component that enables bidirectional traffic between resources with public IP addresses and the internet, used as a target in route rules.

A VCN gateway that lets instances in private subnets initiate outbound internet connections while blocking unsolicited inbound traffic, without requiring public IP addresses.

A VCN gateway that provides private access to supported Oracle Cloud services such as Object Storage without traffic traversing the public internet.

A set of rules attached to a subnet that maps destination CIDR blocks to a gateway or private endpoint, determining where outbound traffic is sent.

A subnet-level set of stateless ingress and egress rules applied to all VNICs in the subnet; return traffic must be explicitly permitted by a matching rule.

A stateful, VNIC-level virtual firewall that lets you apply rules to selected resources regardless of subnet, simplifying micro-segmentation within a VCN.

A virtual router that connects a VCN to on-premises networks over IPSec VPN or FastConnect, and to other VCNs through remote peering or DRG attachments.

A dedicated private physical connection between an on-premises data center and Oracle Cloud, offering predictable bandwidth and lower latency than internet VPN.

A template that defines a compute instance's CPU, memory, and network resources; options include standard, flexible, dense I/O, GPU, and bare metal families.

A shape whose OCPU count and memory can be chosen independently within allowed limits, letting you right-size instances and pay for exactly what you configure.

A saved template capturing the shape, image, metadata, and networking settings used to launch identical compute instances, typically as the basis for an instance pool.

A managed group of identically configured compute instances that can be scaled and healed automatically, distributing instances across availability domains or fault domains.

A policy that automatically adjusts the number of instances in a pool based on metrics such as CPU utilization or a schedule, keeping capacity aligned with demand.

Durable network-attached storage that appears as a disk to an instance; volumes persist independently of the instance and can be detached and reattached.

The block storage that holds an instance's operating system image; it is created at launch and can be preserved or replaced when the instance is terminated.

A container for objects in Object Storage, with a flat namespace, configurable storage tier, and optional versioning, lifecycle rules, and pre-authenticated requests.

The lowest-cost Object Storage tier for long-term retention of rarely accessed data, with retrieval taking hours rather than being immediately available.

A managed NFS-compatible shared file system that multiple instances can mount concurrently, useful for shared application data and lift-and-shift workloads.

A rule set on a bucket that automatically moves or deletes objects based on age or object name, commonly used to transition data into cheaper tiers.

A self-managing Oracle Database service that automates provisioning, patching, tuning, and scaling, offered in serverless and dedicated deployment options.

A managed virtual machine or bare metal deployment hosting Oracle Database, giving you control over the database version, patching schedule, and topology.

Oracle's export and import utility used to move schemas or full databases between environments, frequently chosen for migrating into Autonomous Database.

A replication product that captures and applies ongoing changes between databases, enabling near-zero-downtime migrations and cross-region replication.

An isolated data center group within a region with independent power and network, used to spread resources so a single failure does not take down the whole workload.

A grouping of hardware within an availability domain; placing instances in different fault domains reduces the chance they fail together.

Oracle Database technology that maintains a synchronized standby database and can perform role transitions for disaster recovery or planned maintenance.

The maximum acceptable amount of data loss measured in time, which drives how frequently backups or replication must occur in a recovery design.

The maximum acceptable time to restore a service after an outage, guiding choices such as standby databases, warm sites, or restore-from-backup strategies.

A time-series measurement emitted by OCI resources, such as CPU utilization or disk throughput, which can drive alarms and autoscaling decisions.

A rule that watches a metric against a threshold over a window and triggers a notification or action when the condition is met.

A cost-tracking object scoped to a compartment or tag that forecasts spend and can raise alerts when actual or forecast costs exceed defined thresholds.