Secure Oracle Cloud Infrastructure (OCI) with Mondoo

Mondoo continuously scans your OCI tenancy for misconfigurations and vulnerabilities. Create an OCI integration to give Mondoo the access it needs.

Prerequisites

• Editor or Owner access to the Mondoo space
• Access to an OCI tenancy

Create an OCI API key

Mondoo authenticates to OCI with an API key.

1. Log into the Oracle Cloud Console.

2. In the top-right corner, select your user profile icon, then My Profile.

   

3. In the bottom-left Resources menu, select API keys, then Add API key. To learn more, read Required Keys and OCIDs in the OCI documentation.

   

4. Select Download private key to download the PEM certificate.

   

5. Select Add, then Copy to copy the configuration file snippet OCI displays. Keep both the snippet and the PEM file handy for the next section.

   

Add an OCI integration

In the Mondoo App, navigate to the space where you want to add the integration. In the side navigation bar, select Integrations. In the top right, select + INSTALL. On the integrations page, find the integration you want by browsing or searching by name:

1. Under Cloud, select Oracle Cloud Infrastructure.

   

2. In the Choose an integration name box, enter a name that identifies the OCI tenancy.

   

3. Paste the configuration snippet you copied earlier into the Provide the config file snippet box.

   

4. Upload the PEM certificate in the Drag and drop your .pem file here box.

5. Select START SCANNING.

On the Recommended Policies page, enable the policies you want Mondoo to score this integration against. To learn how policies work, read Manage Policies.

Manage your integration

To open the integration, navigate to the space, select Integrations > Oracle Cloud Infrastructure, and choose the integration.

The status appears beside the integration name:

To remove the integration, select the trash can icon and confirm. Mondoo stops scanning the OCI tenancy.

Next steps

• Learn what Mondoo does
• Integrate other platforms