AWS odb documentation change
Summary
Removed preview notice, updated ODB network architecture details, added Zero-ETL integration reference, and clarified network peering/AZ constraints
Security assessment
Changes focus on architectural clarifications and feature enhancements. The CIDR validation update specifies Oracle VCN checks but doesn't indicate a security fix. AZ binding clarification relates to resource placement rather than security.
Diff
diff --git a/odb/latest/UserGuide/how-it-works.md b/odb/latest/UserGuide/how-it-works.md index c9e59ac0d..5b9436ea7 100644 --- a//odb/latest/UserGuide/how-it-works.md +++ b//odb/latest/UserGuide/how-it-works.md @@ -7,2 +6,0 @@ OCI child sitesOracle Exadata infrastructureODB networkVirtual Private Cloud (VP -Oracle Database@AWS is in preview release and is subject to change. - @@ -56,12 +54 @@ An _ODB network_ is a private isolated network that hosts OCI infrastructure in -The ODB network is similar to a VPC but differs in the following ways: - - * Lacks connectivity to on-premise networks or the internet - - * Created using Oracle Database@AWS tools rather than Amazon EC2 APIs - - * Supports creation of only Oracle Database@AWS resources - - * Managed by AWS rather than customers - - - +You provision resources in an ODB network using Oracle Database@AWS APIs. The ODB network is managed by AWS, but you can set up an ODB peering connection to connect an Amazon VPC to the ODB network. For more information, see enODB peering. @@ -96 +83 @@ To find the logical AZ names in your account that map to the preceding physical - * AWS service integrations — You can configure a network path from your ODB network to Amazon S3. For more information, see [AWS service integrations for Oracle Database@AWS](./service-integrations.html). + * AWS service integrations — You can configure a network path for AWS service integrations such as Amazon S3 and Zero-ETL with Amazon Redshift. For more information, see [AWS service integrations for Oracle Database@AWS](./service-integrations.html). @@ -121 +108,5 @@ ODB peering is different from VPC peering, which is a peering connection between -You can peer an ODB network in one account and a VPC in another account using AWS RAM. If you share an ODB network with another account, the trust account can directly initiate peering. The account that initiates the ODB peering connection owns and manages the connection. For more information, see . +You can peer an ODB network in one account and a VPC in another account using AWS RAM. If you share an ODB network with another account, the trust account can directly initiate peering. The account that initiates the ODB peering connection owns and manages the connection. + +###### Note + +Resources in a VPC can span Availability Zones (AZs). In an ODB network, resources are bound to a single AZ. You define this AZ when you create the ODB network. @@ -129 +120 @@ When you create an ODB peering connection, Oracle Database@AWS performs the foll - 1. Validates the network configurations, including checking for overlapping CIDR blocks + 1. Validates the network configurations, including checking for overlapping CIDR blocks with the Oracle VCN CIDR @@ -146 +137 @@ To allow multiple VPCs to access Oracle Database@AWS resources in one ODB networ -An Amazon VPC transit gateway is a network transit hub used to interconnect VPCs and on-premises networks. You can't create a one-to-many peering connection between an ODB network and multiple VPCs. But you can peer your ODB network to a VPC, and then attach this VPC to a transit gateway. The gateway can connect to multiple VPCs. With this configuration, you can route traffic between multiple VPC subnets to your ODB network. +An Amazon VPC transit gateway is a network transit hub used to interconnect VPCs and on-premises networks. An ODB network supports only one-to-one direct peering between the ODB network and a single VPC. You can peer your ODB network to a VPC, and then attach this VPC to a transit gateway. The gateway can connect to multiple VPCs. With this transit gateway configuration, you can route traffic between multiple VPC subnets to a single ODB network.