Skip to content

Commit c4473c5

Browse files
fixed table, and completed README files
1 parent d663b17 commit c4473c5

File tree

4 files changed

+138
-74
lines changed

4 files changed

+138
-74
lines changed
Lines changed: 31 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,31 @@
1-
# PLACEHOLDER
1+
# Solution Definition (Complete)
2+
3+
Welcome to the Solution Definition template. It is a document structure describing pre-sales documentation for customers embarking on their cloud journey.
4+
5+
The intent is to provide a high-quality piece of documentation, improving the implementation time for customers and partners, and resulting in quicker business benefit realization of the proposed solution.
6+
7+
The template comes in two flavors: ‘Mandatory’ or ‘Complete’. The mandatory version is smaller and includes the minimum required chapters for an Oracle solution. The complete version includes more chapters for optional content that might be situational relevant from project to project.
8+
9+
Please feel free to add, change, remove, or rearrange content as needed. This is a flexible toolbox then a time-consuming process.
10+
11+
# When to use this asset?
12+
13+
Use this template if you want to describe a solution for a customer.
14+
15+
# How to use this asset?
16+
17+
Write the document usually from top to bottom, removing guiding content and replacing examples with actual content. Decide if you need a chapter or not.
18+
19+
Chapters are described within the template.
20+
21+
You might want to use a Markdown editor, or possibly copy the structure into a Word document if you prefer.
22+
23+
You can find prewritten documents for various use cases in this repository, or create an Issue if you are missing something.
24+
25+
# License
26+
27+
Copyright (c) 2023 Oracle and/or its affiliates.
28+
29+
Licensed under the Universal Permissive License (UPL), Version 1.0.
30+
31+
See [LICENSE](https://github.com/oracle-devrel/technology-engineering/blob/main/LICENSE) for more details.

others/customer-documentation/solution-definition-complete/files/solution-definition.md

Lines changed: 38 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -284,7 +284,7 @@ At the time of this document creation, no Security requirements have been specif
284284

285285
*Guide*
286286

287-
*Capture the Non-Functional Requirements for networking-related topics. You can use the networking questions in the [Annex](#networking-requiremend-considerations)*
287+
*Capture the Non-Functional Requirements for networking-related topics. You can use the networking questions in the [Annex](#networking-requirement-considerations)*
288288

289289
*Example:*
290290

@@ -421,87 +421,88 @@ Any deviations from these recommendations needed for the scope of this document
421421

422422
\<Customer Name\> is responsible for implementing, managing, and maintaining all listed topics.
423423

424-
<table style="width:26%;">
424+
<table style="width:25%;">
425425
<colgroup>
426426
<col style="width: 2%" />
427427
<col style="width: 2%" />
428428
<col style="width: 19%" />
429-
<col style="width: 0%" />
430429
</colgroup>
430+
<thead>
431+
<tr class="header">
432+
<th>CATEGORY</th>
433+
<th>TOPIC</th>
434+
<th>DETAILS</th>
435+
</tr>
436+
</thead>
431437
<tbody>
432438
<tr class="odd">
433-
<td rowspan="2"><h4 id="category">CATEGORY</h4>
434-
<p>User Management</p></td>
435-
<td rowspan="2"><h4 id="topic">TOPIC</h4>
436-
<p>IAM Default Domain</p></td>
437-
<td colspan="2" rowspan="2"><p>DETAILS | ======================================================================================================================================================================================================+ Multi-factor Authentication (MFA) should be enabled and enforced for every non-federated OCI user account. |</p>
439+
<td>User Management</td>
440+
<td>IAM Default Domain</td>
441+
<td><p>Multi-factor Authentication (MFA) should be enabled and enforced for every non-federated OCI user account.</p>
442+
<ul>
443+
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/Content/Identity/mfa/understand-multi-factor-authentication.htm">Managing Multi-Factor Authentication</a>.</li>
444+
</ul>
445+
<p>In addition to enforcing MFA for local users, Adaptive Security will be enabled to track the Risk Score of each user of the Default Domain.</p>
438446
<ul>
439-
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/Content/Identity/mfa/understand-multi-factor-authentication.htm">Managing Multi-Factor Authentication</a>. | | In addition to enforcing MFA for local users, Adaptive Security will be enabled to track the Risk Score of each user of the Default Domain.</li>
440-
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/Content/Identity/adaptivesecurity/overview.htm">Managing Adaptive Security and Risk Providers</a>. |</li>
447+
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/Content/Identity/adaptivesecurity/overview.htm">Managing Adaptive Security and Risk Providers</a>.</li>
441448
</ul></td>
442449
</tr>
443450
<tr class="even">
444-
</tr>
445-
<tr class="odd">
446451
<td></td>
447452
<td>OCI Emergency Users</td>
448-
<td colspan="2"><p>A maximum of <strong>three</strong> non-federated OCI user accounts should be present with the following requirements: |</p>
453+
<td><p>A maximum of <strong>three</strong> non-federated OCI user accounts should be present with the following requirements:</p>
449454
<ul>
450-
<li>Username does not match any username in the Customer’s Enterprise Identity Management System |</li>
451-
<li>Are real humans. |</li>
452-
<li>Have a recovery email address that differs from the primary email address. |</li>
453-
<li>User capabilities have Local Password enabled only. |</li>
454-
<li>Has MFA enabled and enforced (see IAM Default Domain). |</li>
455+
<li>Username does not match any username in the Customer’s Enterprise Identity Management System</li>
456+
<li>Are real humans.</li>
457+
<li>Have a recovery email address that differs from the primary email address.</li>
458+
<li>User capabilities have Local Password enabled only.</li>
459+
<li>Has MFA enabled and enforced (see IAM Default Domain).</li>
455460
</ul></td>
456461
</tr>
457-
<tr class="even">
462+
<tr class="odd">
458463
<td></td>
459464
<td>OCI Administrators</td>
460-
<td colspan="2"><p>Daily business OCI Administrators are managed by the Customer’s Enterprise Identity Management System. | This system is federated with the IAM Default Domain following these configuration steps: |</p>
465+
<td><p>Daily business OCI Administrators are managed by the Customer’s Enterprise Identity Management System. This system is federated with the IAM Default Domain following these configuration steps:</p>
461466
<ul>
462-
<li>Federation Setup |</li>
463-
<li>User Provisioning |</li>
464-
<li>For configuration guidance for major Identity Providers see the OCI IAM Identity Domain tutorials. |</li>
467+
<li>Federation Setup</li>
468+
<li>User Provisioning</li>
469+
<li>For configuration guidance for major Identity Providers see the OCI IAM Identity Domain tutorials.</li>
465470
</ul></td>
466471
</tr>
467-
<tr class="odd">
472+
<tr class="even">
468473
<td></td>
469474
<td>Application Users</td>
470475
<td>Application users like OS users, Database users, or PaaS users are not managed in the IAM Default Domain but either directly or in dedicated identity domains. These identity domains and users are covered in the Workload design. For additional information see <a href="https://docs.oracle.com/en-us/iaas/Content/cloud-adoption-framework/iam-security-structure.htm">Design Guidance for IAM Security Structure</a>.</td>
471-
<td></td>
472476
</tr>
473-
<tr class="even">
477+
<tr class="odd">
474478
<td>Cloud Posture Management</td>
475479
<td>OCI Cloud Guard</td>
476-
<td colspan="2"><p>OCI Cloud Guard will be enabled at the root compartment of the tenancy home region. This way it covers all future extensions, like new regions or new compartments, of your tenancy automatically. | It will use the Oracle Managed Detector and Responder recipes at the beginning and can be customized by the Customer to fulfill the Customer’s security requirements. |</p>
480+
<td><p>OCI Cloud Guard will be enabled at the root compartment of the tenancy home region. This way it covers all future extensions, like new regions or new compartments, of your tenancy automatically. It will use the Oracle Managed Detector and Responder recipes at the beginning and can be customized by the Customer to fulfill the Customer’s security requirements.</p>
477481
<ul>
478-
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm">Getting Started with Cloud Guard</a>. | Customization of the Cloud Guard Detector and Responder recipes to fit the Customer’s requirements is highly recommended. This step requires thorough planning and decisions to make. |</li>
479-
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-customize.htm">Customizing Cloud Guard Configuration</a> |</li>
482+
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-start.htm">Getting Started with Cloud Guard</a>. Customization of the Cloud Guard Detector and Responder recipes to fit the Customer’s requirements is highly recommended. This step requires thorough planning and decisions to make.</li>
483+
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/cloud-guard/using/part-customize.htm">Customizing Cloud Guard Configuration</a></li>
480484
</ul></td>
481485
</tr>
482-
<tr class="odd">
486+
<tr class="even">
483487
<td></td>
484488
<td>OCI Vulnerability Scanning Service</td>
485489
<td><p>In addition to OCI Cloud Guard, the OCI Vulnerability Scanning Service will be enabled at the root compartment in the home region. This service provides vulnerability scanning of all Compute instances once they are created.</p>
486490
<ul>
487491
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/scanning/home.htm">Vulnerability Scanning</a>.</li>
488492
</ul></td>
489-
<td></td>
490493
</tr>
491-
<tr class="even">
494+
<tr class="odd">
492495
<td>Monitoring</td>
493496
<td>SIEM Integration</td>
494497
<td>Continuous monitoring of OCI resources is key for maintaining the required security level (see <a href="#regulations-and-compliances-requirements">Regulations and Compliance</a> for specific requirements). See <a href="https://docs.oracle.com/en-us/iaas/Content/cloud-adoption-framework/siem-integration.htm">Design Guidance for SIEM Integration</a> to implement integration with the existing SIEM system.</td>
495-
<td></td>
496498
</tr>
497-
<tr class="odd">
499+
<tr class="even">
498500
<td>Additional Services</td>
499501
<td>Budget Control</td>
500502
<td><p>OCI Budget Control provides an easy-to-use and quick notification on changes in the tenancy’s budget consumption. It will be configured to quickly identify unexpected usage of the tenancy.</p>
501503
<ul>
502504
<li>For configuration details see <a href="https://docs.oracle.com/en-us/iaas/Content/Billing/Tasks/managingbudgets.htm">Managing Budgets</a></li>
503505
</ul></td>
504-
<td></td>
505506
</tr>
506507
</tbody>
507508
</table>
@@ -796,7 +797,8 @@ Synchronized clocks are a necessity for securely operating environments. OCI pro
796797

797798
*Reference:*
798799

799-
[HA Reference for EBS](https://github.com/oracle-devrel/technology-engineering/tree/main/cloud-architecture/oracle-apps-erp)
800+
- [Resilliance on OCI](https://docs.public.oneportal.content.oci.oraclecloud.com/en-us/iaas/Content/cloud-adoption-framework/era-resiliency.htm)
801+
- [Workload Related Content](https://github.com/oracle-devrel/technology-engineering/)
800802

801803
### Security
802804

Lines changed: 31 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,31 @@
1-
# PLACEHOLDER
1+
# Solution Definition (Complete)
2+
3+
Welcome to the Solution Definition template. It is a document structure describing pre-sales documentation for customers embarking on their cloud journey.
4+
5+
The intent is to provide a high-quality piece of documentation, improving the implementation time for customers and partners, and resulting in quicker business benefit realization of the proposed solution.
6+
7+
The template comes in two flavors: ‘Mandatory’ or ‘Complete’. The mandatory version is smaller and includes the minimum required chapters for an Oracle solution. The complete version includes more chapters for optional content that might be situational relevant from project to project.
8+
9+
Please feel free to add, change, remove, or rearrange content as needed. This is a flexible toolbox then a time-consuming process.
10+
11+
# When to use this asset?
12+
13+
Use this template if you want to describe a solution for a customer.
14+
15+
# How to use this asset?
16+
17+
Write the document usually from top to bottom, removing guiding content and replacing examples with actual content. Decide if you need a chapter or not.
18+
19+
Chapters are described within the template.
20+
21+
You might want to use a Markdown editor, or possibly copy the structure into a Word document if you prefer.
22+
23+
You can find prewritten documents for various use cases in this repository, or create an Issue if you are missing something.
24+
25+
# License
26+
27+
Copyright (c) 2023 Oracle and/or its affiliates.
28+
29+
Licensed under the Universal Permissive License (UPL), Version 1.0.
30+
31+
See [LICENSE](https://github.com/oracle-devrel/technology-engineering/blob/main/LICENSE) for more details.

0 commit comments

Comments
 (0)