Oracle Cloud Guard is a cloud-native service specifically designed for Cloud Security Posture Management (CSPM). It continuously monitors your Oracle Cloud Infrastructure (OCI) tenancy for security weaknesses related to configuration, identifies potential security risks, and provides recommendations for remediation. It operates by using detector recipes to identify misconfigured resources and insecure activities, and responder recipes to automatically correct problems, thereby helping to maintain a strong security posture across the cloud environment.

A. OCI Audit: This service records API calls made to OCI resources. It provides a log of events for auditing and compliance purposes but does not proactively manage or recommend fixes for security posture.

B. OCI Virtual Cloud Network (VCN): This is a foundational networking service for creating a private network in OCI. While it includes security features like Security Lists, it is not a posture management service.

D. OCI Identity and Access Management (IAM): This service controls user access and permissions to OCI resources. It is a critical security component but its primary function is authentication and authorization, not continuous posture monitoring.

---

1. Oracle Cloud Infrastructure Documentation - Overview of Cloud Guard: "Oracle Cloud Guard is a cloud-native service that helps customers monitor

identify

achieve

and maintain a strong security posture on Oracle Cloud. Use the service to examine your Oracle Cloud Infrastructure resources for security weakness related to configuration

and your Oracle Cloud Infrastructure operators and users for risky activities." (Oracle Cloud Infrastructure Documentation

"Overview of Cloud Guard

" Section: How Cloud Guard Works).

2. Oracle Cloud Infrastructure Documentation - Overview of the Audit Service: "The Oracle Cloud Infrastructure Audit service automatically records calls to all supported Oracle Cloud Infrastructure public application programming interface (API) endpoints as log events. Currently

all services support logging by the Audit service." (Oracle Cloud Infrastructure Documentation

"Overview of the Audit Service

" First paragraph).

3. Oracle Cloud Infrastructure Documentation - Overview of IAM: "Oracle Cloud Infrastructure Identity and Access Management (IAM) service lets you control who can access your cloud resources. You can control what type of access a group of users has and to which specific resources." (Oracle Cloud Infrastructure Documentation

"Overview of IAM

" Section: How IAM Works).

4. Oracle Cloud Infrastructure Documentation - Overview of Networking: "A VCN is a customizable

software-defined network that you set up in an Oracle Cloud Infrastructure region. Like a traditional data center network

a VCN gives you complete control over your network environment." (Oracle Cloud Infrastructure Documentation

"Overview of Networking

" Section: Virtual Cloud Networks).