DEV Community

Mahmoud Rabie
Mahmoud Rabie

Posted on

Terraform Configuration for comlying with CIS OCI Foundations Benchmark

Oracle ๐™Œ๐™ช๐™ž๐™˜๐™ ๐™Ž๐™ฉ๐™–๐™ง๐™ฉ ๐™‚๐™ž๐™ฉ๐™๐™ช๐™— Repository has ๐™๐™š๐™ง๐™ง๐™–๐™›๐™ค๐™ง๐™ข ๐˜พ๐™ค๐™ฃ๐™›๐™ž๐™œ๐™ช๐™ง๐™–๐™ฉ๐™ž๐™ค๐™ฃ for deploying a standardized environment in an Oracle ๐˜พ๐™ก๐™ค๐™ช๐™™ ๐™„๐™ฃ๐™›๐™ง๐™–๐™จ๐™ฉ๐™ง๐™ช๐™˜๐™ฉ๐™ช๐™ง๐™š (๐™Š๐˜พ๐™„) tenancy that helps organizations to ๐™˜๐™ค๐™ข๐™ฅ๐™ก๐™ฎ ๐™ฌ๐™ž๐™ฉ๐™ ๐™ฉ๐™๐™š ๐˜พ๐™„๐™Ž ๐™Š๐˜พ๐™„ ๐™๐™ค๐™ช๐™ฃ๐™™๐™–๐™ฉ๐™ž๐™ค๐™ฃ๐™จ ๐˜ฝ๐™š๐™ฃ๐™˜๐™๐™ข๐™–๐™ง๐™  ๐™ซ1.1.

The ๐˜พ๐™ก๐™ค๐™ช๐™™ ๐™๐™š๐™จ๐™ค๐™ช๐™ง๐™˜๐™š๐™จ within the template is configured to meet the ๐˜พ๐™„๐™Ž ๐™Š๐˜พ๐™„ ๐™๐™ค๐™ช๐™ฃ๐™™๐™–๐™ฉ๐™ž๐™ค๐™ฃ๐™จ ๐˜ฝ๐™š๐™ฃ๐™˜๐™๐™ข๐™–๐™ง๐™  ๐™จ๐™š๐™ฉ๐™ฉ๐™ž๐™ฃ๐™œ๐™จ related to:
(1) ๐Ÿ‘ค ๐™„๐˜ผ๐™ˆ (Identity & Access Management)
(2) ๐ŸŒ ๐™‰๐™š๐™ฉ๐™ฌ๐™ค๐™ง๐™ ๐™ž๐™ฃ๐™œ
(3) ๐Ÿ”‘ ๐™†๐™š๐™ฎ๐™จ
(4) ๐Ÿ›ก๏ธ ๐˜พ๐™ก๐™ค๐™ช๐™™ ๐™‚๐™ช๐™–๐™ง๐™™
(5) ๐Ÿ–Š๏ธ ๐™‡๐™ค๐™œ๐™œ๐™ž๐™ฃ๐™œ
(6) ๐Ÿ•ณ๏ธ ๐™‘๐™ช๐™ก๐™ฃ๐™š๐™ง๐™–๐™—๐™ž๐™ก๐™ž๐™ฉ๐™ฎ ๐™Ž๐™˜๐™–๐™ฃ๐™ฃ๐™ž๐™ฃ๐™œ
(7) ๐Ÿ”Œ ๐˜ฝ๐™–๐™จ๐™ฉ๐™ž๐™ค๐™ฃ
(8) โšก ๐™€๐™ซ๐™š๐™ฃ๐™ฉ๐™จ
(9) โฐ ๐˜ผ๐™ก๐™–๐™ง๐™ข๐™จ
(10) ๐Ÿ“ฒ ๐™‰๐™ค๐™ฉ๐™ž๐™›๐™ž๐™˜๐™–๐™ฉ๐™ž๐™ค๐™ฃ๐™จ
(11) ๐Ÿ”‹๐™Š๐™—๐™Ÿ๐™š๐™˜๐™ฉ ๐™Ž๐™ฉ๐™ค๐™ง๐™–๐™œ๐™š
(12) ๐Ÿ’ฐ ๐˜ฝ๐™ช๐™™๐™œ๐™š๐™ฉ๐™จ

This ๐™ง๐™š๐™ฅ๐™ค๐™จ๐™ž๐™ฉ๐™ค๐™ง๐™ฎ ๐™š๐™ฃ๐™˜๐™ก๐™ค๐™จ๐™š๐™จ ๐™ฉ๐™ฌ๐™ค ๐™™๐™š๐™ก๐™ž๐™ซ๐™š๐™ง๐™–๐™—๐™ก๐™š๐™จ:

(1) A ๐™๐™š๐™›๐™š๐™ง๐™š๐™ฃ๐™˜๐™š ๐™„๐™ข๐™ฅ๐™ก๐™š๐™ข๐™š๐™ฃ๐™ฉ๐™–๐™ฉ๐™ž๐™ค๐™ฃ written in ๐™๐™š๐™ง๐™ง๐™–๐™›๐™ค๐™ง๐™ข (HashiCorp Language) that provisions fully functional resources in an OCI tenancy.
(2) A ๐™‹๐™ฎ๐™ฉ๐™๐™ค๐™ฃ ๐™จ๐™˜๐™ง๐™ž๐™ฅ๐™ฉ that performs ๐™˜๐™ค๐™ข๐™ฅ๐™ก๐™ž๐™–๐™ฃ๐™˜๐™š ๐™˜๐™๐™š๐™˜๐™ ๐™จ for most of the ๐˜พ๐™„๐™Ž ๐™Š๐˜พ๐™„ ๐™๐™ค๐™ช๐™ฃ๐™™๐™–๐™ฉ๐™ž๐™ค๐™ฃ๐™จ ๐˜ฝ๐™š๐™ฃ๐™˜๐™๐™ข๐™–๐™ง๐™  ๐™ง๐™š๐™˜๐™ค๐™ข๐™ข๐™š๐™ฃ๐™™๐™–๐™ฉ๐™ž๐™ค๐™ฃ๐™จ. The script is completely independent of the Terraform code and can be used against any existing tenancy.

๐™Œ๐™ช๐™ž๐™˜๐™ ๐™จ๐™ฉ๐™–๐™ง๐™ฉ ๐™๐™š๐™ง๐™ง๐™–๐™›๐™ค๐™ง๐™ข ๐™˜๐™ค๐™ฃ๐™›๐™ž๐™œ๐™ช๐™ง๐™–๐™ฉ๐™ž๐™ค๐™ฃ ๐™›๐™ค๐™ง ๐™ฉ๐™š๐™ฃ๐™–๐™ฃ๐™˜๐™ฎ ๐™จ๐™š๐™ฉ๐™ช๐™ฅ ๐™–๐™˜๐™˜๐™ค๐™ง๐™™๐™ž๐™ฃ๐™œ ๐™ฉ๐™ค ๐˜พ๐™„๐™Ž ๐™Š๐˜พ๐™„ ๐™๐™ค๐™ช๐™ฃ๐™™๐™–๐™ฉ๐™ž๐™ค๐™ฃ๐™จ ๐˜ฝ๐™š๐™ฃ๐™˜๐™๐™ข๐™–๐™ง๐™ 
https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart

๐™Ž๐™ฉ๐™–๐™ฎ ๐™ฉ๐™ช๐™ฃ๐™š๐™™ ๐™—๐™ฎ ๐™›๐™ค๐™ก๐™ก๐™ค๐™ฌ๐™ž๐™ฃ๐™œ
https://www.linkedin.com/feed/hashtag/?keywords=did_you_know_that

Image description

https://www.linkedin.com/posts/mahmoudrabie2004_didabryouabrknowabrthat-cloud-cloudcomputing-activity-6932565146124890112-vGth?utm_source=linkedin_share&utm_medium=member_desktop_web

Top comments (0)