Oracle Integration Cloud: Building Integrations That Survive Production · Module 12 · Security: credentials, certificates and network
Network: allowlists and private endpoints
Lesson 123 of 175 · 3 min
Reaching a system that is NOT on the internet, and letting one reach you. The agent, the allowlist, and WHO AT THE CLIENT OWNS EACH. OIC runs in Oracle's cloud, so a system inside the client's network is not reachable by default — and that is the correct starting position rather than an obstacle to be argued away. THE CONNECTIVITY AGENT IS THE ANSWER FOR OUTBOUND. A small piece of software installed inside the client's network that establishes an OUTBOUND connection to OIC and carries traffic over it. The direction is the whole security argument: nothing needs to be opened inbound at the client's perimeter, which is what makes it acceptable to a security team that would refuse a firewall hole. It is also a piece of infrastructure with an owner, and that is the part projects forget. It runs on a host somebody patches, it needs to be restarted…
The full lesson is part of the course
The video, the complete written lesson and the module quiz are included in Oracle Integration Cloud: Building Integrations That Survive Production, with a certificate on completion and a fourteen-day refund window.
In this module: Module 12 · Security: credentials, certificates and network
- 1What an integration actually holds
- 2Where credentials liveFree preview
- 3The service account and least privilege
- 4OAuth, and which grant to use
- 5Certificates: trust, identity and expiry
- 6Rotation without an outage
- 7Network: allowlists and private endpoints
- 8What ends up in a log
- 9What breaks: four security failures
- 10Lab briefing · Audit an integration for exposure