VMware Cloud Well-Architected Framework for Oracle Cloud VMware Solution: Shared Responsibility Model
VMware Cloud Shared Responsibility
A shared responsibility model is common among the different VMware Cloud Infrastructure Service providers, which defines distinct roles and responsibilities between the VMware Cloud Infrastructure Services provider and an organization consuming the service.
Disclaimer: The intent of this document is to provide guidance and best practices for VMware Cloud Infrastructure Service providers regarding the shared responsibilities of the service.
Oracle Cloud VMware Solution
Oracle VMware Cloud Solution gives the customer full administrative access to their environment after provisioning. Post provisioning, Oracle removes its access and provides the customer with FULL ACCESS to the SDDC environment. After the initial SDDC deployment, access is available only to the customer.
Responsibilities
Customer Responsibility: Security in the Cloud
Customers are responsible for deployment and ongoing configuration of their SDDC, virtual machines, and data that resides therein. In addition to determining the network firewall and VPN configuration, customers are responsible for managing virtual machines (including in-guest security and encryption) and using Oracle's Shared Identity and Access Management with vCenter Roles and Permissions to apply the appropriate controls for users.
Customer Responsibility: Security of the Infrastructure
In the Oracle Cloud, customers are also responsible for the deployment and ongoing configuration of the bare metal servers that their SDDC consumes. An SSH key pair is required to deploy the compute instances, and after that, the customer can either disable, enable or delete the key pair. Oracle is responsible for the physical facilities, physical security, infrastructure, and hardware underlying the entire service.
Oracle Responsibility: Security of the Infrastructure
Details on the shared responsibility model employed by Oracle Cloud VMware Solution can be found in the table below. This table does not represent an exhaustive list of all responsibilities, but it covers common tasks. A great deal of low-level operational work is handled by the Oracle Cloud VMware Solution team, allowing the customer to focus on managing their workloads instead of physical infrastructure. Contact Oracle Cloud support if any further clarification is needed on which party is responsible for a particular task or component.
Shared Responsibility Matrix
The following is not an exhaustive list of responsibilities but encompasses the most frequent tasks and definitions. For further questions, please contact Oracle. For a detailed description of the roles and responsibilities for Oracle Cloud VMware Solution, please refer to the Service Description.
|
Entity |
Responsibility/Activity |
|
Customer |
|
|
Oracle |
|
References
Oracle Infrastructure and Platform Cloud Services Security
In the next section, learn about the different considerations for managing infrastructure and application services.