Skip to content

Latest commit

 

History

History
50 lines (41 loc) · 2.36 KB

oracle.md

File metadata and controls

50 lines (41 loc) · 2.36 KB
Raw

CloudSploit For Oracle Cloud Infrastructure (OCI)

Cloud Provider Configuration

  1. Log into your Oracle Cloud console and navigate to Administration > Tenancy Details.
  2. Copy your Tenancy OCID and paste it in the index file.
  3. Navigate to Identity > Users.
  4. Click on Create User.
  5. Enter "CloudSploit", then enter "CloudSploit API Access" in the description.
  6. Click on Create.
  7. Copy the User OCID and paste it in the index file.
  8. Follow the steps to Generate an API Signing Key listed on Oracle's Cloud Doc(https://docs.cloud.oracle.com/iaas/Content/API/Concepts/apisigningkey.htm#How).
  9. Open the public key (oci_api_key_public.pem) in your preferred text editor and copy the plain text (everything). Click on Add Public Key, then click on Add.
  10. Copy the public key fingerprint and paste it in the index file.
  11. Open the private key (oci_api_key.pem) in your preferred text editor and paste it in the index file.
  12. Navigate to Identity > Groups.
  13. Click on Create Group.
  14. Enter "SecurityAudit" in the Name field, then enter "CloudSploit Security Audit Access" in the description.
  15. Click on Submit.
  16. Click on the SecurityAudit group in the Groups List and Add the CloudSploit API User to the group.
  17. Navigate to Identity > Policies.
  18. Click on Create Policy.
  19. Enter "SecurityAudit" in the Name field, then enter "CloudSploit Security Audit Policy" in the description.
  20. Copy and paste the following statement:
  21. ALLOW GROUP SecurityAudit to READ all-resources in tenancy
  22. Click on Create.
  23. Navigate to Identity > Compartments.
  24. Select your root compartment or the compartment being audited.
  25. Click on "Copy" by your Compartment OCID.

Create an API user

In your Oracle Cloud Infrastructure Console, under Identity > Users:

  • Click on "Create User"
  • Set the Name to "CloudSploitAPI"
  • Set the Description to "CloudSploit API Read Only Access"
  • Click on "Create"

Generate an API Signing Key

Please follow the instructions on: https://docs.cloud.oracle.com/iaas/Content/API/Concepts/apisigningkey.htm

You will need:

  • Private un-encrypted key: openssl genrsa -out ~/.oci/oci_api_key.pem 2048
  • Public Key: openssl rsa -pubout -in ~/.oci/oci_api_key.pem -out ~/.oci/oci_api_key_public.pem
  • Key Fingerprint: openssl rsa -pubout -outform DER -in ~/.oci/oci_api_key.pem | openssl md5 -c

Save

Save the private un-encrypted key in this directory to run your scans