# Oracle Cloud Integration Oracle Cloud is a comprehensive cloud computing platform and infrastructure offered by Oracle Corporation. It provides a variety of cloud services, including infrastructure as a service (IaaS), platform as a service (PaaS), software as a service (SaaS), and data as a service (DaaS). ### How does this integration help Sprinto The following integration enables Sprinto to ensure that your Oracle Cloud infrastructure services comply with the data security requirements of your chosen compliance framework. Sprinto integrates with your Oracle Cloud account to verify and configure the desired security settings. In case any configuration is absent, Sprinto maps the equivalent Sprinto check accordingly. #### Sprinto checks for Oracle Following are the Sprinto checks available for Oracle integration:
Sprinto checkReference procedure
Infra entity should be classifiedHow to fix
Disk encryption should be enabled on storageHow to fix
VCN flow logs should be capturedHow to fix
ATP database backup should be enabledHow to fix
ATP should be protected from direct internet trafficHow to fix
Oracle cloud access should be removed for offboarded userHow to fix
Oracle Cloud user should have MFA enabledHow to fix
User should be identifiedHow to fix
Rules for who can access critical systems should be configuredHow to fix
User access to critical system should be validHow to fix
Compute instance CPU utilization should be monitoredHow to fix
CPU utilization of an ATP should be monitoredHow to fix
Free space of an ATP should be monitoredHow to fix
Compute instance should be protected from direct internet trafficHow to fix
Active connection count of a load balancer should be monitoredHow to fix
### Before you begin * Log in on Sprinto as administrator. * Ensure you have “Admin” access on the Oracle account you want to integrate. ### Integrate Sprinto with Oracle Cloud Follow the below steps to integrate Oracle Cloud on Sprinto: 1. Get the Tenancy OCID and Home Region from your Oracle Cloud account. * Log in to your[ Oracle account](https://www.oracle.com/in/cloud/sign-in.html) using your credentials. * Click on the profile icon at the top and copy the Tenancy ID for your Oracle Cloud account. For example, in the image below, Tenancy is sprintodev.[
](https://prod-files-secure.s3.us-west-2.amazonaws.com/f23d1d57-24f7-4d0f-ab01-646c77683298/922629f9-3346-4fea-89fa-65d196aab433/Untitled.png)
* On the Tenancy details page, copy the OCID and Home region details from the Tenancy information tab. We will need these details later to build integration on Sprinto.[
](https://prod-files-secure.s3.us-west-2.amazonaws.com/f23d1d57-24f7-4d0f-ab01-646c77683298/57df1900-1ab7-46b6-8951-a0d4f0de1d9f/Untitled.png)
2. Get the User OCID detail.\ Note: You need to create a new user on your Oracle account to get the OCID.
* Click on the profile icon at the top and select Identity Domain: Default.
* On Identity domain page, click Users, then click Create User.
* On Create user page, enter the First and Last name and the Email address. * Select Auditors-Group permission, then click Create.
* Now, select the user you have created. * Copy the user’s OCID from the User information tab. We will need this detail later to build integration on Sprinto.
3. Get the API fingerprint from the Oracle Cloud account. * On your created user page from step 2, click API Keys under Resources, and click Add API key.
* On Add API key page, select Paste a public key, paste the below public key, and click Add. ``` -----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNx3eblKMfF7XSWQCLFp tp7eaTFB7/GFsfFvTGQ1vZMTEy+l7TYECSDe4iTk9XQPRlwHawYoNlT4GQAkpGw+ BWClW7sGWXuLwKuAEArRyfeUystCMWTTflG0NXw/56XyDMssq8k0yDz7Tyy1ruCA kGIMxGt1nPl1CaNApCCSBRMRZbCc5zRibTm6nwhGNb5G7WcNvDoLL9q58lGBsYCU fbzdZO+oz2m6UfNpV5H6f5jhVpCkhoXUzRDuFmLBxJ87E/1IUt+36OLDT3+p42AS wVMpp5WzrinXCUNMzv8OdVYYIxapjWCSbmafVunQ3nQj8JPcmWHdROoTdsw5/3H0 iQIDAQAB-----END PUBLIC KEY----- ```
* Copy the API key fingerprint. We will need this detail to build integration on Sprinto.
4. Update policy statements on Oracle Cloud. * Navigate to[ Policies](https://cloud.oracle.com/identity/domains/policies) in your Oracle cloud account. * Select AuditPolicy from the policies list.[
](https://prod-files-secure.s3.us-west-2.amazonaws.com/f23d1d57-24f7-4d0f-ab01-646c77683298/992d4e34-313f-46d3-803d-d3a6e2f41e3a/Untitled.png)
* Click Edit Policy Statements under Statements.
* **On** Edit Policy Statements page, select Advanced, and paste the below-mentioned policy statements, and click Save Changes. ``` Allow group Auditor-Group to inspect all-resources in tenancy Allow group Auditor-Group to read buckets in tenancy Allow group Auditor-Group to read file-family in tenancy Allow group Auditor-Group to read network-security-groups in tenancy Allow group Auditor-Group to read users in tenancy Allow group Auditor-Group to use cloud-shell in tenancy Allow group Auditor-Group to read dynamic-groups in tenancy Allow group Auditor-Group to read tag-defaults in tenancy ```
5. Integrate Oracle Cloud on Sprinto. * Go to **Settings** > **Integration** > **Available**, and click Connect next to **Oracle Cloud**.
* Read the on-screen instructions, and click Next.
* On the Integration page, enter the following details you copied from steps 1, 2, and 3 and click Connect. * Tenancy OCID * Home Region * User OCID * API Key finger print
6. Add Oracle Cloud as an Infrastructure service provider on Sprinto. * Go to Data Library > Infrastructure, and click + Add infra provider. * On Choose infra provider page, click Add next to Oracle Cloud. 7. Add Oracle Cloud as a Critical system on Sprinto. * Go to Data Library > Access > Overview, and click + Add critical system. * On Add Critical System page, select Oracle Cloud and click Add System.
* On Access overview page, select Oracle Cloud from the list. * On the Summary page, click Configure Now next to the Oracle cloud account.
* On the Manage page, click Configure next to access validity.[
](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72086122989/original/q4cSqC1_S3NwL_gW0VytrKpNyTSr6oc0KQ.png?1708407633)
* Choose one of the options to define valid users based on roles.[
](https://prod-files-secure.s3.us-west-2.amazonaws.com/f23d1d57-24f7-4d0f-ab01-646c77683298/6f63e5e6-6b30-4bf8-a3f6-0b5c6187720d/Untitled.png)
### Final step After completing Step 3, allow 15 to 20 minutes for Sprinto to finish the data syncing process. Sprinto may take a few hours to evaluate the synced data and activate relevant Sprinto checks. If needed, go to Data Library > Infrastructure and select your desired integrated Oracle infra service to review the pending Sprinto check. If you need any assistance with integration, kindly get in touch with[ Sprinto check](https://www.notion.so/How-to-integrate-Sprinto-with-Semgrep-b1dd02216fa74bba8ba3d57e0d7c9963?pvs=21).