Oracle Multicloud Architect Associate key terms

An architecture in which an organization uses services from two or more public cloud providers, either independently or in an integrated way, to gain choice, resilience, or access to differentiated capabilities.

A model where cloud services run in locations the provider does not fully own or operate, such as customer data centers or partner facilities, while remaining managed through the provider's control plane.

A service that places Oracle Exadata infrastructure and Oracle Database services inside Microsoft Azure data centers, managed through the Oracle Cloud Infrastructure console but billed and provisioned via Azure.

A service delivering Oracle Exadata and Oracle Database capabilities within AWS regions, connected to AWS networking and identity, while Oracle operates the database infrastructure on the customer's behalf.

A service that runs Oracle Exadata and Autonomous Database workloads inside Google Cloud regions, integrated with Google Cloud networking, billing, and identity while Oracle manages the underlying infrastructure.

Dedicated Exadata hardware deployed in a hyperscaler data center and consumed as a managed service, giving low-latency access to applications running in the same cloud region.

In Oracle Database@AWS, a customer-owned network construct that hosts the Exadata infrastructure and its database nodes, attached to an AWS VPC for private connectivity.

An Autonomous Database deployment option that runs on customer-dedicated Exadata infrastructure in a partner cloud, offering isolation and predictable performance for regulated or high-throughput workloads.

A fully managed Oracle Database deployment where Oracle handles provisioning, patching, and scaling automatically, typically consumed directly through the Oracle cloud rather than partner-cloud infrastructure.

A dedicated, private network connection between two cloud providers, bypassing the public internet to deliver predictable latency and higher bandwidth for traffic between workloads in different clouds.

Oracle Cloud Infrastructure's dedicated private connectivity service that links an on-premises or partner network to an OCI region, either through an Oracle-connected provider or a direct cross-connect.

A virtual router in Oracle Cloud Infrastructure that provides a single attachment point for private connectivity such as FastConnect, site-to-site VPN, and remote peering between VCNs.

A connection between two virtual cloud networks that allows private IP traffic using local or remote peering, without requiring traffic to traverse the public internet or a gateway appliance.

A hub construct in a hyperscaler network that centralizes connectivity between virtual networks, on-premises links, and partner services, reducing the number of point-to-point peering relationships needed.

The fundamental private networking boundary in Microsoft Azure, into which subnets and delegated subnets are placed so that Oracle Database@Azure resources can be reached privately.

A subnet in a hyperscaler virtual network that is reserved for a specific managed service, preventing other resources from being deployed there and enabling the service to inject its own network interfaces.

A private IP address within a customer virtual network that front-ends a managed service, so traffic to that service never leaves the private address space.

A Google Cloud mechanism that exposes a service through an internal IP address in a consumer VPC, used to reach Oracle Database@Google Cloud without public exposure.

A networking relationship that connects two virtual private clouds so resources communicate using private addresses, typically non-transitive and requiring explicit route and firewall configuration.

A trust relationship that lets users authenticate with one identity provider and receive tokens accepted by another cloud, avoiding separate credentials for each environment.

A container in Oracle Cloud Infrastructure Identity and Access Management that holds users, groups, and policies, and can be federated with external identity providers for single sign-on.

A credential-free authentication pattern in which a workload presents a short-lived token from its home cloud to obtain access to resources in another cloud, removing long-lived secrets.

An Oracle Cloud Infrastructure identity assumed by a service or function at runtime, allowing it to call other OCI services without embedding user credentials in code or configuration.

A logical grouping in Oracle Cloud Infrastructure used to organize resources, isolate quotas, and scope IAM policies so that access can be granted at a granular level.

A security principle in which identities receive only the permissions required for their tasks, minimizing blast radius if credentials are compromised or misused.

A control that divides sensitive responsibilities among different identities so no single person can both make and approve a high-risk change, such as provisioning infrastructure and granting access.

An encryption key created and controlled by the customer in a key management service, used to encrypt data at rest so the customer can revoke access independently of the provider.

A managed service that stores cryptographic keys, secrets, and certificates with access policies and audit trails, used to protect data and credentials across cloud boundaries.

The requirement that data remain stored and processed within specified geographic or legal boundaries, which drives region selection and architecture in multicloud designs.

The principle that data is subject to the laws and governance of the jurisdiction where it resides, affecting where workloads and backups may be placed in a multicloud estate.

The systematic recording of API calls and administrative actions across cloud providers, used for forensics, compliance evidence, and detecting anomalous behavior in a multicloud environment.

The ability to understand system state from external outputs such as metrics, logs, and traces, enabling diagnosis of failures that span multiple clouds and providers.

A technique that follows a single request across service and cloud boundaries by propagating a correlation identifier, revealing where latency or errors originate in a multicloud transaction.

A measurable target for a service's reliability or performance, such as availability percentage over a window, used to evaluate whether a multicloud design meets business expectations.

The maximum acceptable duration to restore a service after disruption, guiding standby architecture choices such as active-passive or active-active across cloud regions.

The maximum acceptable amount of data loss measured in time, determining backup frequency and replication strategy between clouds and regions.

Oracle's replication technology that maintains a synchronized standby database, supporting switchover and failover for high availability within or across cloud regions.

Oracle's logical replication and change data capture product used to move committed changes between databases with minimal downtime, common in migrations and active-active designs.

A migration approach that keeps the source system serving traffic while data is replicated and synchronized, then cuts over during a brief controlled window.