Oracle Cloud Infrastructure Documentation

Managing a Resolver Endpoint's Security Attributes

Add, update, and remove security attributes associated with a resolver endpoint.

Use Zero Trust Packet Routing (ZPR) along with, or in place of, network security groups to control network access to resolver endpoints by applying security attributes to them and creating ZPR policies to control communication among them. For more information, see Zero Trust Packet Routing.

  • Adding Security Attributes

    1. On the Resolver endpoints list page, select the endpoint that you want to work with. If you need help finding the list page or the endpoint, see Listing Resolver Endpoints.
      The endpoints detail's page opens.
    2. Select Security.
      The Security page opens.
    3. Find the Security attributes section and select Add security attributes.
      The Add security attributes panel opens.
    4. Enter the following information:
      • Namespace: Select a security attribute namespace from the list. This list contains those security attribute namespaces already configured. See Creating a Security Attribute Namespace for more information.
      • Key: Select a key from the list.
      • Value: Select a value for the corresponding key from the list.
    5. Select the Add security attribute button to add another attribute up to a total of three.
      You can also update the configuration of any existing security attribute listed here.
    6. Select Add security attributes at the bottom of the panel to complete the task.
    The security attributes you added are viewable Security tab in the endpoint's details page.

    Editing Security Attributes

    To update an endpoint's existing security attributes, follow these steps
    1. On the Resolver endpoints list page, select the endpoint that you want to work with. If you need help finding the list page or the endpoint, see Listing Resolver Endpoints.
      The endpoints detail's page opens.
    2. Select Security.
      The Security page opens.
    3. From the Actions menu (three dots) for the endpoint you want, select Edit.
      The Edit security attribute panel opens.
    4. Update the security attributes as described earlier in this topic.
    5. Select Update.
    The security attributes you added or updated are viewable in the Security tab in the endpoint's details page.

    Deleting Security Attributes

    To delete an endpoint's existing security attributes, follow these steps
    1. On the Resolver endpoints list page, select the endpoint that you want to work with. If you need help finding the list page or the endpoint, see Listing Resolver Endpoints.
      The endpoint's details page opens.
    2. Select Security.
      The Security page opens.
    3. From the Actions menu (three dots) for the endpoint you want, select Delete.
    4. When prompted, confirm the deletion.

  • Adding Security Attributes

    You can include ZPR security attributes when using oci dns resolver-endpoint create command by including the security-attributes option and corresponding value:

    oci dns resolver-endpoint create ... --security-attributes security_attributes

    where security_attributes are ZPR security attributes for this endpoint.

    For example:

    oci dns resolver-endpoint create ... --security-attributes {"oracle-zpr":{"td":{"value":"42","mode":"enforce"}}}

    For information on creating an endpoint using the CLI, see oci dns resolver-endpoint create.

    Similarly, you can use the security-attributes option when running the oci dns resolver-endpoint update command to add ZPR security attributes when you're updating it:

    oci dns resolver-endpoint update ... --security-attributes security_attributes

    For information on updating an endpoint using the CLI, see oci dns resolver-endpoint update.

    For a complete list of flags and variable options for CLI commands, see the Command Line Reference.

    Editing Security Attributes

    Use the security-attributes option when running the oci dns resolver-endpoint update command to change the settings of existing ZPR security attributes.

    Deleting Security Attributes

    Use the security-attributes option with the value "{}" when running the oci dns resolver-endpoint update command to delete the settings of ZPR security attributes. For example:

    oci dns resolver-endpoint update ... --security-attributes {}

  • Adding Security Attributes

    Run the CreateResolverEndpoint operation to add security attributes to an endpoint you're creating. Include the securityAttributes attributes and it values.

    Run the UpdateResolverEndpoint operation to add security attributes to an existing endpoint. Include the securityAttributes attributes and it values.

    Editing Security Attributes

    Run the UpdateResolverEndpoint operation to update an endpoint. Include the securityAttributes attributes and update their existing values.

    Deleting Security Attributes

    Run the UpdateResolverEndpoint operation to update an endpoint. Include the securityAttributes attributes with an empty map to delete the security attributes.