Tenancies must contain an events rule and notification topic for network gateway changes

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

An events rule and notification topic should be configured for important changes in your Oracle Cloud Infrastructure environments. This security control provides real-time visibility into critical network infrastructure modifications, enabling rapid detection and response to unauthorized changes that could compromise security. The events rule and notification topic must be created in the root compartment (tenancy) to ensure comprehensive monitoring across all compartments and prevent missed events.

Remediation

  1. Create a notification topic in the root compartment (tenancy).
  2. Create an events rule in the root compartment (tenancy) that monitors the following event types:
    • com.oraclecloud.virtualnetwork.createdrg
    • com.oraclecloud.virtualnetwork.deletedrg
    • com.oraclecloud.virtualnetwork.updatedrg
    • com.oraclecloud.virtualnetwork.createdrgattachment
    • com.oraclecloud.virtualnetwork.deletedrgattachment
    • com.oraclecloud.virtualnetwork.updatedrgattachment
    • com.oraclecloud.virtualnetwork.changeinternetgatewaycompartment
    • com.oraclecloud.virtualnetwork.createinternetgateway
    • com.oraclecloud.virtualnetwork.deleteinternetgateway
    • com.oraclecloud.virtualnetwork.updateinternetgateway
    • com.oraclecloud.virtualnetwork.changelocalpeeringgatewaycompartment
    • com.oraclecloud.virtualnetwork.createlocalpeeringgateway
    • com.oraclecloud.virtualnetwork.deletelocalpeeringgateway.end
    • com.oraclecloud.virtualnetwork.updatelocalpeeringgateway
    • com.oraclecloud.natgateway.changenatgatewaycompartment
    • com.oraclecloud.natgateway.createnatgateway
    • com.oraclecloud.natgateway.deletenatgateway
    • com.oraclecloud.natgateway.updatenatgateway
    • com.oraclecloud.servicegateway.attachserviceid
    • com.oraclecloud.servicegateway.changeservicegatewaycompartment
    • com.oraclecloud.servicegateway.createservicegateway
    • com.oraclecloud.servicegateway.deleteservicegateway.end
    • com.oraclecloud.servicegateway.detachserviceid
    • com.oraclecloud.servicegateway.updateservicegateway
  3. Configure the events rule to send notifications to the notification topic.
  4. Ensure both the events rule, events rule actions, and notification topic are enabled and in ACTIVE state.

For detailed instructions, refer to the Getting Started with Events, Matching Events with Filters, and Managing Topics sections of the Oracle Cloud Infrastructure documentation.