Oracle Database

Oracle Database is a relational database management system (RDBMS) developed by Oracle Corporation. It enables organizations to store, manage, and retrieve data using Structured Query Language (SQL). The database includes features for ensuring data integrity, performing backup and recovery, controlling access, and tuning performance.

Oracle Database supports both on-premises and cloud-based deployments through Oracle Cloud Infrastructure.

Through this integration, Apono helps you securely manage just-in-time, just-enough access to your Oracle Database, tables and custom roles.

---

Prerequisites

---

Create an Oracle Database user

You must create a user in your Oracle Database instance for the Apono connector.

Use the following steps to create a user and grant it permissions to your databases:

1. In your preferred client tool, create a new user. Be sure to set a strong password for the user.

   ⚠️

   The password must be a minimum of 9 characters and satisfy the following minimum requirements:

   • 2 lowercase letters
   • 2 uppercase letter
   • 2 numbers (0-9)
   • 2 special characters
   • Cannot have 3 consecutive identical characters
   • Have 4 different characters than the previous password
   • Cannot contain, repeat, or reverse the user name

   SQL

   CREATE USER apono_connector IDENTIFIED BY password;
   

   
   

2. Grant the user permission to connect to the Oracle Database.

   SQL

   GRANT CREATE SESSION TO apono_connector;
   

1. Expose databases to the user. This allows Apono to view database names without accessing the contents of each database.
   SQL

   GRANT SELECT ANY TABLE TO apono_connector;
   

4. Grant the user permissions to query data from any object, create new user accounts, modify existing user accounts, and remove user accounts from the database.
   SQL

   GRANT SELECT, CREATE, ALTER, DELETE FROM DBA_USERS TO apono_connector;
   

5. Using the credentials from step 1, create a secret for the database instance:
   • AWS
   • Azure
   • GCP
   • Kubernetes

You can now integrate Oracle Database.

---

Integrate Oracle Database

Follow these steps to complete the integration:

1. On the Catalog tab, click Oracle Database. The Connect Oracle Database page appears.
2. From the dropdown menu, select a connector.

   💡

   If the desired connector is not listed, click + Add new connector and follow the instructions for creating a connector (AWS, Azure, GCP, Kubernetes).

3. Under Select resource types, select one or multiple resource types for Apono to discover in all instances of the environment.
4. Click Next. The Complete setup page appears.
5. Enter a unique, alphanumeric, user-friendly Integration Name. This name is used to identify this integration when constructing an Access Flow.
6. Enter the Hostname of the Oracle Database instance to connect.
7. (Optional) Enter the Port value for the database. By default, Apono sets this value to 1521.
8. (Optional) In the Credentials rotation period (in days) field, enter the number of days after which the database credentials must be rotated.
9. Under Secret Store, associate the secret:
   • AWS
   • Azure
   • GCP
   • Kubernetes
10. Click Connect.

Now that you have completed this integration, you can create access flows that grant permission to your Oracle Database resources.