LAB 21 ::‐ Vault use in OCI Compute ? - guptasanjeev-52/oci_docs GitHub Wiki

VAULT....

OCI Vault is a secure service in oracle cloud Infrastructure that stores and manages sensitive information such as Encryption keys , passwords , certificates and secrets. It helps protect data by providing centralized and secure Key Management for cloud resources , including compute Instances. ** Secure place Where you can Keep your Things Safely,(No one can touch our access)**. {Vault is used in storage services only}

Importance of OCI Vault.

1.) Protects sensitive information from unauthorized access. 2.) Provides Centralized management of encryption keys and Secrets. 3.) Helps Meet security and compliance requirements. 4.) Supports automatic Key rotation to improve security. 5.) Enables secure encryption for OCI services such as compute , Block volume , object storage and Databases.

Advantages of OCI Vault.

Enhanced security :: safely stores Encryption keys and secrets.

Centralized Management :: Manage all keys and secrets from one place.

Access Control :: Integrates with OCI IAM to control who can access the vault.

Automation key rotation :: Reduces the risk of compromised Keys.

High Availability :: Keeps key available and protected across OCI.

Easy Integration :: Work Seamlessly with other OCI services.

Compliance support :: Helps organizations satisfy industry security standards.

ENCRYPTION ::- It's Not an Human readable thing/language. It's an a machine language and main thing Machine can only Encrypt & Decrypt it.

USE of VAULT in OCI.

OCI compute uses Vault to securely manage Encryption keys and secrets required by applications and virtual machines. Instead of storing passwords or API keys directly on a compute instance , they can be securely stored in Vault and accessed only by the authorized users or applications. this improves security , reduces the risk of credential exposure and simplifies secret management across the cloud environment.

Steps to Create Vault in OCI..

Step 1 ::- Open OCI Vault Service

Burger menu >> Identity & Security >> Key Management >> Vault >> Create Vault

Click on Create vault..

Always Select compute and storage compartment

Now, fill up the following details.

Now, Click on Create vault


Creating Master encryption key...

Inside the Vault >> Go to Master Encryption Keys >> Click Create Key..

Select Compartment & Protection Mode and fill the Details...

HSM ::- Hardware Key..

Software ::- Soft key in OCI ( Always Used )

Select Algorithm and Length and click Create Key

THANKYOU!