LAB 66 — Cloud Guard: Dismiss an intentional security finding - DevWithNehaCloud/Oracle-Cloud-Infrastructure-wiki GitHub Wiki

Goal

Use Oracle Cloud Infrastructure (OCI) Cloud Guard to review a security problem and dismiss it as an accepted exception. This lab uses the finding VCN has InternetGateway attached for the hub-vcn resource.

Important: Dismiss a finding only after confirming the affected resource and that the condition is intentional. Dismissal marks the problem as ignored; it does not remediate the underlying configuration.

Before you begin

  • Sign in to the correct OCI tenancy and region (US East (Ashburn) in the screenshots).
  • Open Identity & Security → Cloud Guard → Problems.
  • Confirm that the problem belongs to the expected compartment and resource.

Steps

1. Find the problem

In Problems, locate VCN has InternetGateway attached. Confirm that the resource is hub-vcn and review its status and risk details. Select the problem to open it.

2. Review the finding

On the problem page, open Details and verify the resource and finding information. Check the problem history or responder activity if you need more context before deciding.

3. Dismiss it with an explanation

  1. Select Remediate, then choose Dismiss.
  2. In the comment field, explain why the finding is accepted. For this lab, use: Internet Gateway is intentionally attached to the Hub VCN for public connectivity in the lab environment.
  3. Select Dismiss to confirm.

Verify the result

Return to the Problems list and confirm that the finding is shown as dismissed or no longer open. The comment should record the reason for the exception.

What dismissal means

Dismissal tells Cloud Guard to ignore this problem as an accepted exception. It does not remove the Internet Gateway or change the VCN. If the configuration is unexpected, investigate and remediate it instead of dismissing the finding.