OCI Migration Architect Pro key terms

A structured set of guidance, phases, and decision points that organizations use to plan and govern a move to cloud, covering strategy, assessment, landing zone design, migration execution, and ongoing operations.

A discovery and analysis exercise that inventories existing workloads, dependencies, utilization, licensing, and compatibility so that each application can be assigned a migration approach and a target platform.

A classification scheme for workload dispositions: retire, retain, rehost, relocate, replatform, repurchase, and refactor. Each workload receives exactly one disposition that drives its migration plan and effort estimate.

Moving an application to cloud infrastructure with minimal code change, typically by importing virtual machines or reinstalling the same software stack on equivalent compute, preserving the existing architecture and operating model.

Migrating a workload while making targeted changes that exploit managed cloud services, such as moving a self-managed database to a managed service or replacing a local message broker with a managed queue.

A comparison of current on-premises run costs against projected cloud consumption, licensing, support, egress, and staffing costs, used to justify a business case and to select the most economical target shape.

A pre-provisioned, governed cloud environment with compartments, identity, network topology, logging, security controls, and budget guardrails already in place, so migrated workloads can be deployed without redesigning foundations each time.

A logical container within an OCI tenancy used to organize and isolate resources for access control, quota, and cost tracking. Policies and budgets are scoped to compartments rather than to individual resources.

The root OCI account that owns all resources and identities for an organization. It sits above compartments, and its home region determines where global identity and some control-plane services are anchored.

A human-readable statement granting a group permission to perform a set of verbs on a resource type in a compartment or tenancy, forming the basis of least-privilege access control in OCI.

A group whose membership is computed from matching rules on resource attributes, allowing OCI compute instances or other resources to be granted permissions without storing credentials, commonly used for service-to-service access.

An OCI container for users, groups, and identity providers that supports federation with external directories, enabling centralized authentication and consistent role mapping across compartments and applications.

A compartment-level policy recipe that enforces or detects controls such as encryption, public bucket access, and network exposure, helping migrated workloads meet baseline compliance without manual review.

A posture management service that continuously evaluates resources against detector recipes, raises problems for risky configurations, and can trigger automated remediation through responders.

A network design where a central hub VCN provides shared connectivity, inspection, and gateways, and spoke VCNs connect to it for workload isolation while sharing common egress and on-premises paths.

A software-defined private network in OCI with its own CIDR blocks, subnets, route tables, security lists, and gateways, serving as the boundary within which migrated compute and database resources communicate.

A virtual firewall applied to individual VNICs, allowing rules to follow a workload rather than a subnet, which simplifies tight segmentation for migrated applications spread across subnets.

A set of ingress and egress rules applied at the subnet level, affecting every VNIC in that subnet. It is coarser than an NSG and is typically used for baseline traffic control.

A virtual router that attaches to a VCN and provides the path to on-premises networks through FastConnect or Site-to-Site VPN, and increasingly acts as a hub for inter-VCN and cross-region traffic.

A dedicated private physical connection between a customer network and OCI, offering predictable latency and high bandwidth for bulk migration traffic and for ongoing hybrid connectivity.

An encrypted IPsec tunnel over the public internet between a customer gateway and an OCI DRG, commonly used for migration when dedicated circuits are not yet available or as a backup path.

A connection between two VCNs that allows private IP traffic using local or remote peering types, without requiring traffic to traverse the internet or a gateway, and without overlapping CIDR ranges.

A managed, time-bound SSH access service that lets administrators reach private compute instances without exposing them to the internet or maintaining a jump host, useful during migration cutover.

The process of bringing an external virtual machine image into OCI in a supported format so it can launch as an instance, often used in rehost migrations of existing servers.

A saved template of shape, image, metadata, and networking settings used to launch consistent compute instances repeatedly, supporting scaled-out tiers of a migrated application.

An isolated data center grouping within an OCI region with independent power and network, used to place migrated workloads so that a single failure does not take down the whole application.

A grouping of hardware within an availability domain that shares no single point of failure with other fault domains, used for anti-affinity placement of clustered or highly available migrated nodes.

A fully managed Oracle database that automates provisioning, patching, tuning, and scaling, offered in serverless and dedicated modes, and a common replatform target for migrating Oracle workloads.

A managed Oracle Exadata offering on OCI that provides scale-out database machines with smart scan and high availability, typically chosen when a migrated workload needs maximum performance or specific Exadata features.

A managed Oracle Database offering on OCI running on virtual machines, giving administrative control over the database host while OCI handles patching, backup, and lifecycle operations.

An OCI service that moves schemas and data from supported sources into OCI databases, performing schema conversion where needed and reporting on migration progress and errors.

An Oracle replication product that captures changes from a source database and applies them to a target, enabling near-zero-downtime migrations and ongoing bidirectional synchronization.

An Oracle high-availability feature that maintains a synchronized standby database, used after migration to protect the new primary and to support fast switchover during validation or cutover.

A durable, internet-accessible storage service for unstructured data organized in buckets, commonly the destination for file shares, backups, and archive data moved during migration.

A physical device shipped to a customer site, loaded with data, and returned to OCI for ingestion into Object Storage, used when network transfer of very large datasets would take too long.

A software or hardware appliance placed on-premises that presents familiar file or block interfaces while storing data in OCI Object Storage, easing migration of file-based workloads.

A managed NFS-compatible shared file system in OCI that multiple compute instances can mount concurrently, often the target for migrated home directories and shared application content.

A durable network-attached disk that can be attached to a compute instance and moved between instances, used to preserve data disks during rehost migrations and to support cloning.

The planned event in which production traffic and data are switched from the source environment to the OCI target, usually inside a short maintenance window with a tested rollback path.

A full dry run of the cutover sequence performed before the real event, measuring elapsed time, validating steps, and revealing gaps in scripts, access, or dependencies.

A documented, tested procedure for reverting to the source environment if validation after cutover fails, including data reconciliation steps and decision criteria for triggering the reversal.