Oracle Cloud Infrastructure (OCI) compartments are a fundamental component for organizing and isolating cloud resources. Their primary purpose is to act as logical containers to which Identity and Access Management (IAM) policies can be applied, thereby controlling access. The service specifically designed for storing and managing encryption keys and secrets is the OCI Vault service. While a vault and its keys reside within a compartment, the compartment itself does not provide the storage or management functionality; it is merely the container for the Vault resource.

A. Compartments are indeed global resources. When a compartment is created, it is available across all regions within the tenancy, allowing for a consistent organizational structure.

B. This describes the core function of compartments. IAM policies are attached to compartments (or the tenancy) to grant specific permissions to groups of users for the resources within that compartment.

D. OCI supports a hierarchical structure by allowing compartments to be nested up to six levels deep. This enables a granular organization of resources that can mirror a company's internal structure.

1. Oracle Cloud Infrastructure Documentation

"Managing Compartments": This document states

"Compartments are tenancy-wide

across all regions." It also details the process of creating nested compartments

confirming

"You can create subcompartments in compartments to create a hierarchy up to six levels deep."

Source: Oracle Cloud Infrastructure Documentation

Service: Identity and Access Management

Section: Managing Compartments.

2. Oracle Cloud Infrastructure Documentation

"Overview of Vault": This source clarifies the function of the Vault service

distinguishing it from compartments. It states

"Oracle Cloud Infrastructure Vault is a managed service that lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to access resources."

Source: Oracle Cloud Infrastructure Documentation

Service: Security > Vault

Section: Overview of Vault.

3. Oracle Cloud Infrastructure Documentation

"How Policies Work": This document explains the relationship between IAM policies and compartments. It specifies

"You can attach a policy to a compartment or the tenancy. Where you attach it controls who can then modify it or delete it." This confirms that policies are applied to compartments to control access.

Source: Oracle Cloud Infrastructure Documentation

Service: Identity and Access Management

Section: How Policies Work.