AWS odb documentation change
Summary
Restructured documentation to emphasize VPC Lattice integration, added details about S3 backup configurations and Zero-ETL Redshift integration, reorganized service network components
Security assessment
The changes emphasize VPC Lattice's role in securing service connections ('connect, secure, and monitor') and clarify access controls for S3 integration (ability to enable/disable direct access). However, there's no evidence of addressing a specific security vulnerability.
Diff
diff --git a/odb/latest/UserGuide/service-integrations.md b/odb/latest/UserGuide/service-integrations.md index 3db27ff61..c31938f53 100644 --- a//odb/latest/UserGuide/service-integrations.md +++ b//odb/latest/UserGuide/service-integrations.md @@ -5 +5 @@ -Oracle Database@AWS is in preview release and is subject to change. +VPC Lattice and the ODB network @@ -9 +9 @@ Oracle Database@AWS is in preview release and is subject to change. -Oracle Database@AWS integrates with AWS services to provide enhanced functionality and connectivity options for your Oracle databases. You can configure network paths to AWS services directly from your ODB network without requiring additional VPCs or complex networking setups. +To provide enhanced functionality and connectivity options for your Oracle databases, Oracle Database@AWS integrates with AWS services using Amazon VPC Lattice. You can configure network paths to AWS services directly from your ODB network without requiring additional VPCs or complex networking setups. @@ -11 +11 @@ Oracle Database@AWS integrates with AWS services to provide enhanced functionali -To allow access to services natively from your ODB network, Oracle Database@AWS creates a default Amazon VPC Lattice service network. Amazon VPC Lattice is a fully managed application networking service that you use to connect, secure, and monitor layer-7 services and layer-4/TCP resources. For more information, see [What is Amazon VPC Lattice?](https://docs.aws.amazon.com/vpc-lattice/latest/ug/what-is-vpc-lattice.html). +Oracle Database@AWS supports the following AWS managed service integrations: @@ -13 +13 @@ To allow access to services natively from your ODB network, Oracle Database@AWS -With Oracle Database@AWS, Amazon VPC Lattice provides a single logical construct to interconnect your Oracle Exadata databases with your VPCs and AWS services. To enable AWS service integrations when you create an ODB network, VPC Lattice automatically provisions the following entities: +**Amazon S3** @@ -15 +14,0 @@ With Oracle Database@AWS, Amazon VPC Lattice provides a single logical construct - * Service network @@ -17 +16 @@ With Oracle Database@AWS, Amazon VPC Lattice provides a single logical construct - * Service network endpoint +You can integrate Amazon S3 with Oracle Database@AWS in the following ways: @@ -19 +18 @@ With Oracle Database@AWS, Amazon VPC Lattice provides a single logical construct - * Resource gateway + * Oracle managed automatic backups to Amazon S3 – Oracle Database@AWS automatically enables network access for automatic backups. This integration can't be disabled. If you set Amazon S3 as your managed backup target in the OCI console, then OCI uploads automatic backups to an S3 bucket. @@ -20,0 +20 @@ With Oracle Database@AWS, Amazon VPC Lattice provides a single logical construct + * Direct access to Amazon S3 from your ODB network – You can enable direct ODB network access to S3 and then store scripts, import and export files, and related files in an S3 bucket. You can disable this access. This setting is independent of the automatic network access for Oracle managed automatic backups. @@ -24 +23,0 @@ With Oracle Database@AWS, Amazon VPC Lattice provides a single logical construct -Oracle Database@AWS supports the following AWS service integrations: @@ -26 +25 @@ Oracle Database@AWS supports the following AWS service integrations: -**Amazon S3** +**Zero-ETL integration with Amazon Redshift** @@ -29 +28 @@ Oracle Database@AWS supports the following AWS service integrations: -You can integrate Amazon S3 with Oracle Database@AWS in the following ways: +You can enable Zero-ETL integration of your ODB network with Amazon Redshift. This integration enables you to replicate data to Amazon Redshift from your Oracle databases running in Oracle Database@AWS without the traditional extract, transform, and load (ETL) process. This integration enables real-time analytics and AI workloads by automatically synchronizing your Oracle data with Amazon Redshift. @@ -31 +30,11 @@ You can integrate Amazon S3 with Oracle Database@AWS in the following ways: - * Oracle managed automatic backups to Amazon S3 – Oracle Database@AWS automatically enables network access for automatic backups. This integration can't be disabled. If you set Amazon S3 as your managed backup target in the OCI console, then OCI uploads automatic backups to an S3 bucket. +## Amazon VPC Lattice and the ODB network + +To allow access to services natively from your ODB network, Oracle Database@AWS creates a default Amazon VPC Lattice service network. Amazon VPC Lattice is a fully managed application networking service that you use to connect, secure, and monitor layer-7 services and layer-4/TCP resources. + +With Oracle Database@AWS, Amazon VPC Lattice provides a single logical construct to interconnect your Oracle Exadata databases with your VPCs and AWS services. To enable AWS service integrations when you create an ODB network, VPC Lattice automatically provisions the following entities: + + * A service network + + * A service-network endpoint + + * A resource gateway @@ -33 +41,0 @@ You can integrate Amazon S3 with Oracle Database@AWS in the following ways: - * Direct access to Amazon S3 from your ODB network – You can enable access to S3 and then use it to store scripts, import and export files, and related files. You can disable this access. This setting is independent of the automatic access for Oracle managed automatic backups. @@ -36,0 +45 @@ You can integrate Amazon S3 with Oracle Database@AWS in the following ways: +In addition to managed integrations for AWS services, you can also use VPC Lattice to access services and resources hosted in other VPCs, or access ODB network instances from your VPC. You can manage access and resources using the VPC Lattice console, CLI, and APIs. See here for more details (ideally pointing to Lattice use guide that has more details on enabling this). For more information, see [What is Amazon VPC Lattice?](https://docs.aws.amazon.com/vpc-lattice/latest/ug/what-is-vpc-lattice.html) and [VPC Lattice for Oracle Database@AWS](https://docs.aws.amazon.com/vpc-lattice/latest/ug/vcp-lattice-oci.html). @@ -46 +55 @@ ODB peering -Integration with S3 +S3 integration