Oracle Cloud Infrastructure Security Professional (2025) — Lesson 1: OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access

Learning Objectives

• Assess the dependencies, controls, and expected business outcome for OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access.
• Demonstrate the workflow and leave reproducible evidence in OCI identity architecture and least-privilege policy review.
• Recommend a preventive improvement after resolving a broad tenancy policy granting unintended administrative access.

Detailed Topics

• OCI security architecture
• Shared responsibility
• IAM domains
• Policies
• Compartments
• Federation
• And privileged access
• Decision ownership, prerequisites, and acceptance evidence for OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access
• Relevant access, data, integration, performance, recovery, and support considerations

Instructor Demonstration

The demonstration traces OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access from requirement through execution and review. Learners see where evidence should be collected, how OCI identity architecture and least-privilege policy review supports verification, and which warning signs demand investigation.

Hands-On Exercise

Configure and test OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access with representative records. Use “a broad tenancy policy granting unintended administrative access” as the troubleshooting challenge, compare competing hypotheses, retest only the affected path, and complete OCI identity architecture and least-privilege policy review for peer review.

1. Map the current process and mark where the expected result can first be observed.
2. Run the scenario while preserving timestamps, job identifiers, and relevant output.
3. Apply a reversible correction only after evidence supports the cause.
4. Retest the original case plus an unaffected case and update the handover record.

Scenario Analysis

• Clarify the business trigger, affected roles, required records, and acceptable result for OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access.
• Compare at least two implementation or correction choices and identify which evidence would distinguish them.
• Decide how OCI identity architecture and least-privilege policy review should be reviewed, approved, retained, and handed to the next owner.

Troubleshooting Guidance

For a failure in OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access, separate access, setup, data, integration, and timing causes. Compare the observed sequence with OCI identity architecture and least-privilege policy review; if “a broad tenancy policy granting unintended administrative access” is confirmed, make the smallest reversible correction and document why broader changes were rejected.

Validation Checklist

• The scope of OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access is clear, including what is deliberately excluded from the test.
• Evidence in OCI identity architecture and least-privilege policy review supports each material decision and outcome.
• A negative test demonstrates that controls reject or flag an invalid condition.
• Open risks, owners, due actions, and production safeguards are documented.

Lesson Outcome

Learners can apply OCI security architecture, shared responsibility, IAM domains, policies, compartments, federation, and privileged access, explain the decisions made, and defend the result with OCI identity architecture and least-privilege policy review.