Oracle Cloud Infrastructure Documentation

Creating a Security Zone Recipe

Create a recipe for a security zone.

Note

Alternatively, you can clone an existing recipe.

Before you can create a recipe, you must enable Cloud Guard in the tenancy. See Getting Started with Cloud Guard. Also, you should understand the available security zone policies.

After creating a recipe, you can create a zone that's associated with the recipe.
    1. On the Recipes list page, select the compartment to create the recipe in. If you need help finding the list page or the compartment filter, see Listing Security Zone Recipes.
    2. Select Create Recipe.
    3. On the Recipe information page, enter a name and description for the recipe.

      Avoid entering confidential information.

    4. Verify the compartment that you're creating the recipe in.
    5. (Optional) Select Show advanced options to apply tags to the recipe.

      If you have permissions to create a resource, you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. See Resource Tags. You can also apply tags to a recipe after you create it.

    6. Select Next.
    7. On the Policies page, clear the check box for any policy that you want to disable.

      By default, all policies are enabled in a new recipe.

      You can filter the list of policies by selecting a specific policy type or resource type. You can also search for policies by name.

    8. Select Next.
    9. On the Review page, review the number of policies that are enabled and disabled in this recipe, and then choose one of the following options:
      • To create the recipe, select Create.
      • To save the resource definition as a Terraform configuration, select Save as stack.

        For more information about saving stacks from resource definitions, see Creating a Stack from a Resource Creation Page.

      The Recipe details page opens and displays information about the recipe.

  • Use the oci cloud-guard security-recipe create command and required parameters to create a security zone recipe:

    oci cloud-guard security-recipe create --compartment-id <compartment_ocid> --display-name <display_recipe_name> --security-policies <security_policies> [OPTIONS]

    For a complete list of flags and variable options for CLI commands, see the Command Line Reference.

  • Run the CreateSecurityRecipe operation to create a security zone recipe.