Oracle Cloud Infrastructure Documentation

Accessing a Private Network from Data Flow

To let a Data Flow Application to access a private network, you must:

  1. Meet the prerequisites for creating, editing, managing and using private endpoints.
  2. Create a private endpoint for the Application to use, if one doesn't already exist.
  3. Attach the private endpoint to the Application.
  4. Use the private endpoint while you Running an Application.

Prerequisites

Oracle Cloud Infrastructure lets you configure private access for your resources using private endpoints.

Data Flow uses private endpoints to access the private network where your data sources are hosted. You must have the required set up to use the Data Flow private endpoints. If using SCAN proxy, configure the network to allow traffic between the nodes in the subnet for the SCAN port.

Also, to create, update, or delete private endpoints in Oracle Cloud Infrastructure, you need to obtain certain permissions in Oracle Cloud Infrastructure Identity and Access Management (IAM) for the relevant compartments in your tenancy. The following table lists the required permissions for virtual networking resources in Oracle Cloud Infrastructure for the private endpoint operations.

Operation Required Access on Underlying Resources
Create a private endpoint

For the private endpoint compartment:

  • Create VNIC (VNIC_CREATE)
  • Delete VNIC (VNIC_DELETE)
  • (Optional) Update members in a network security group (NETWORK_SECURITY_GROUP_UPDATE_MEMBERS)
  • (Optional) Associate a network security group (VNIC_ASSOCIATE_NETWORK_SECURITY_GROUP)

For the subnet compartment:

  • Attach subnet (SUBNET_ATTACH)
  • Detach subnet (SUBNET_DETACH)
Update a private endpoint

For the private endpoint compartment:

  • Update VNIC (VNIC_UPDATE)
  • (Optional) Update members in a network security group (NETWORK_SECURITY_GROUP_UPDATE_MEMBERS)
  • (Optional) Associate a network security group (VNIC_ASSOCIATE_NETWORK_SECURITY_GROUP)
Delete a private endpoint

For the private endpoint compartment:

  • Delete VNIC (VNIC_DELETE)
  • (Optional) Update members in a network security group, if using one (NETWORK_SECURITY_GROUP_UPDATE_MEMBERS)

For the subnet compartment:

  • Detach subnet (SUBNET_DETACH)
Important

If you have the manage work requests permission, you can view the logs and error messages that are encountered while working with private endpoints.