Securing Compute Cloud@Customer Resources

Compute Cloud@Customer resources are the virtual cloud networking, compute instances, and storage for which your workloads reside. Securing these resources secures your workloads.

You secure Compute Cloud@Customer resources the same way you secure resources in Oracle Cloud Infrastructure, with a slight, but important difference:

• IAM resources: When you create users, groups, compartments, and policies to secure resources, you configure the IAM resources in your tenancy in Oracle Cloud Infrastructure.

  The IAM resources are automatically synchronized to Compute Cloud@Customer, but IAM can't be changed in Compute Cloud@Customer.

  For information about managing IAM, see IAM with Identity Domains.

• Resource security features: When you use security features that are part of the resource, for example, network security groups for securing networking resources, you configure the resource feature on Compute Cloud@Customer.

  The following table lists the resources that have security features that you can use to secure the resource.

  Resources with Security Features	For More Information
  Networking: VCNs and DNS	Securing Networking: VCN, Load Balancers, and DNS
  Load balancers	LBaaS Security
  Compute instances	Securing Compute
  Block volumes	Securing Block Volume
  File storage	Securing File Storage
  Object storage	Object Storage Security Guidelines