# Oracle Cloud Infrastructure

This document provides instructions for configuring Oracle Cloud Infrastructure (OCI) in order for the Netography Context Integration to have the correct access to pull label contexts.

## Prerequisites <a href="#prerequisites" id="prerequisites"></a>

Before configuring the OCI Context Integration in Netography, you will need to have a group, policy, user, and tenancy OCID configured in OCI. Refer to the below instructions for more configuration information.

### Create a group <a href="#create-a-group" id="create-a-group"></a>

1. In the top left menu click on "Identity & Security" and then click on "Domain" in the next menu to the right

<figure><img src="/files/yiK0fvegORsBTlgvSKnU" alt=""><figcaption></figcaption></figure>

2. If you have more than one domain, select your main domain. If not, skip this step (you'll just see the main domain).

<figure><img src="/files/1LVZJEh1j4NuNcz46qpZ" alt=""><figcaption></figcaption></figure>

3. On the next screen click "User Management" in the top bar.&#x20;

<figure><img src="/files/Qgv1bp7x0VSp0GmWBAql" alt=""><figcaption></figcaption></figure>

4. Scroll down to the Groups section, and click on "Create Group".

<figure><img src="/files/c2FdtVEaVGfg7kjdAh7v" alt=""><figcaption></figcaption></figure>

4. Name the group `vectra-fusion-context-group` and give it a description of your choice. Then, click "Create" to create the group.&#x20;

<figure><img src="/files/2j4ceMisogfmHhI5N5ue" alt=""><figcaption></figcaption></figure>

### Create a policy <a href="#create-a-policy" id="create-a-policy"></a>

1. In the top left menu click on "Identity & Security" and then click on "Policies"

<figure><img src="/files/coVz5TwgSx5HQjVRDRvF" alt=""><figcaption></figcaption></figure>

2. On the following screen click "Create Policy"

<figure><img src="/files/ZZnT5vW7WjT7lsaf64q8" alt=""><figcaption></figcaption></figure>

3. Complete the Policy Form as follows:

   1. Name: `vectra-fusion-context-policy`
   2. Description: `Context Policy for Vectra Fusion`
   3. Compartment: Your root compartment (varies)
   4. Toggle the manual editor, and then paste the following policy:

   ```
   allow group vectra-fusion-context-group to read virtual-network-family in tenancy
   allow group vectra-fusion-context-group to read instance-family in tenancy
   ```
4. Click "Create" to complete the policy creation.

<figure><img src="/files/OKPGoIXwJXc1LUWti0Mr" alt=""><figcaption></figcaption></figure>

### Create a User <a href="#create-a-user" id="create-a-user"></a>

1. In the top left menu click on "Identity & Security" and then click on "Domain" in the next menu to the right

<figure><img src="/files/yiK0fvegORsBTlgvSKnU" alt=""><figcaption></figcaption></figure>

2. If you have more than one domain, select your main domain. If not, skip this step (you'll just see the main domain).

<figure><img src="/files/1LVZJEh1j4NuNcz46qpZ" alt=""><figcaption></figcaption></figure>

3. On the next screen click "User Management" in the top bar.&#x20;

<figure><img src="/files/Qgv1bp7x0VSp0GmWBAql" alt=""><figcaption></figcaption></figure>

4. Click "Create User".

<figure><img src="/files/QfqHHbaprA1jDsouDYbr" alt=""><figcaption></figcaption></figure>

5. Fill in the User creation form as follows:
   1. First Name: `Vectra Fusion`
   2. Last Name: `Context User`
   3. Username: `vectra-fusion-context-user`
   4. Toggle `Use the email address as the username` off.

<figure><img src="/files/xUJx5VafyncAni2S9cDX" alt=""><figcaption></figcaption></figure>

6. Scroll down, and select the group `vectra-fusion-context-group`. Click "Create" to create the user.&#x20;

<figure><img src="/files/PoxlDXWM7HeVQGTvrndM" alt=""><figcaption></figcaption></figure>

### Obtain User and Tenancy OCIDs <a href="#obtain-user-and-tenancy-ocids" id="obtain-user-and-tenancy-ocids"></a>

1. On the page of the user we just configured click "Copy" under User Information to copy the User OCID as this is needed for the Vectra Fusion portal configuration.

<figure><img src="/files/OoRUsrGBPltpYS8AJGRT" alt=""><figcaption></figcaption></figure>

2. Click on the user icon in the top right corner and select Tenancy from the menu<br>

<figure><img src="/files/Sp9Je4jszovetoOJtG43" alt=""><figcaption></figcaption></figure>

3. On the tenancy page click the copy button to obtain the tenancy OCID. This is also needed for the Vectra Fusion portal.
   1. Also note the region as that will also be required in the Vectra Fusion portal.

<figure><img src="/files/M3De89QbpiJzOSbEla8U" alt=""><figcaption></figcaption></figure>

## Vectra Fusion Portal Steps <a href="#netography-portal-steps" id="netography-portal-steps"></a>

Navigate to Integrations (make sure you are on the Context tab) and click "Add Integration", then select `Oracle Cloud Infrastructure`

![](/files/oXPvoluWa4aaJ6rCKEQf)

### Authentication <a href="#authentication" id="authentication"></a>

The following fields are necessary for the integration to authenticate with Oracle Cloud Infrastructure.

| Field          | Required | Description                                         |
| -------------- | -------- | --------------------------------------------------- |
| `User OCID`    | yes      | User OCID to use for authentication to Oracle Cloud |
| `Tenancy OCID` | yes      | Tenancy ocid to use for connecting to Oracle Cloud  |

### Configuration <a href="#configuration" id="configuration"></a>

The following fields are specific to the Oracle integration.

| Field               | Required | Description                                                                                                                                                                                | Example |
| ------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------- |
| `Tag/Label Matches` |          | Tag/Label matches represent the names of tags you use within the cloud provider. IE. A user might choose to tag all of their web servers with a tag "subsystem" that has a value of "web". |         |

#### Retrieve the public key information <a href="#retrieve-the-public-key-information" id="retrieve-the-public-key-information"></a>

Once the integration has been created, return to edit the cloud provider you just created.

![](/files/ElR8SgUprfwsAAgi6W9k)

Make note of the public key and fingerprint. This information will be used in the post configuration step within COS.

![](/files/SD2XNlyHpKTxfsfL0tH2)

### Oracle Steps (Continued) <a href="#oracle-steps-continued" id="oracle-steps-continued"></a>

### Add API Key to Oracle Cloud User <a href="#add-api-key-to-oracle-cloud-user" id="add-api-key-to-oracle-cloud-user"></a>

1. Navigate in the Oracle Cloud GUI to the user we just created under "Identity & Security" > "Users"
2. Select the `vectra-fusion-context-user` user you created.
3. On the top menu click "API Keys".

<figure><img src="/files/yLCjvPFHrYU47i6NrdYV" alt=""><figcaption></figcaption></figure>

4. Next click "Add API Key".

<figure><img src="/files/FqAMLzGwnHmP2CriRdB4" alt=""><figcaption></figcaption></figure>

5. Select "Paste Public Key" in the "Add API Key" modal.
   1. Then, paste the public key from the Netography context integration into the text area.
6. Click the "Add" button to complete the configuration.

<figure><img src="/files/Kh8nQckCtqTQtNDBEway" alt=""><figcaption></figcaption></figure>

7. Click "Close" on the resulting window titled "Configuration File Preview".<br>

The integration should now be functioning.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fusion.vectra.ai/enrich-traffic-with-context/configure-context-integrations/oracle-cloud.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.