Oracle Cloud Infrastructure Documentation

Managing a Bastion's Security Attributes

Manage the security attributes for a bastion.

You can use Zero Trust Packet Routing (ZPR) along with or in place of network security groups to manage network access to OCI resources . To do this, define ZPR policies that govern how resources communicate with each other, and then add security attributes to those resources. For more information, see Zero Trust Packet Routing.

    1. On the Bastions list page, find the bastion that you want to work with. If you need help finding the list page or the bastion, see Listing Bastions.
    2. From the Actions menu (three dots) for the bastion, select Manage security attributes.
    3. Update the configuration of any existing security attribute listed.
      • To add a security attribute, select Add security attribute. You can add up to three security attributes.
      • To remove a security attribute, select the Delete Row button.
    4. Select Update to save the changes.

    The security attributes that you added or updated are viewable on the Security tab of the bastion's details page.

  • Use the --security-attributes option when running the oci bastion bastion update command to add Zero Trust Packet Routing (ZPR) security attributes when you're updating a bastion:

    oci bastion bastion update --bastion-id <bastion_ocid> --security-attributes <security-attribute-name>[OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the UpdateBastion operation to edit a bastion. Include the securityAttributes attribute and its values.