{"id":492,"date":"2021-05-02T00:22:02","date_gmt":"2021-05-02T00:22:02","guid":{"rendered":"https:\/\/adrianotanaka.com.br\/?p=492"},"modified":"2022-03-11T19:17:44","modified_gmt":"2022-03-11T19:17:44","slug":"data-safe-adocao-de-targets","status":"publish","type":"post","link":"https:\/\/adrianotanaka.com.br\/index.php\/2021\/05\/02\/data-safe-adocao-de-targets\/","title":{"rendered":"Data Safe &#8211; Ado\u00e7\u00e3o de targets"},"content":{"rendered":"\n<p>O processo de ado\u00e7\u00e3o de um target \u00e9 bem simples, se voc\u00ea estiver usando um banco Autonomous(ADW,ATP), basta ir na tela de detalhes do banco  e na parte do Data Safe clicar em register:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"108\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/04\/image-34-1024x108.png\" alt=\"\" class=\"wp-image-495\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/04\/image-34-1024x108.png 1024w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/04\/image-34-300x32.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/04\/image-34-768x81.png 768w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/04\/image-34.png 1067w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Agora caso o seu target seja alguma das outras op\u00e7\u00f5es que o Data Safe suporta, voc\u00ea tem algumas op\u00e7\u00f5es para realizar essa ado\u00e7\u00e3o:<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Por IP P\u00fablico<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"646\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-4-1024x646.png\" alt=\"\" class=\"wp-image-505\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-4-1024x646.png 1024w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-4-300x189.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-4-768x485.png 768w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-4.png 1036w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Nesse modelo, toda a comunica\u00e7\u00e3o fica dentro da infraestrutura do OCI e ela \u00e9 criptografada, se o target for um Autonomous, ele passa por um Service Gateway , se for uma VM ela passa por um Nat GW.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Private endpoint<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"902\" height=\"363\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-5.png\" alt=\"\" class=\"wp-image-506\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-5.png 902w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-5-300x121.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-5-768x309.png 768w\" sizes=\"auto, (max-width: 902px) 100vw, 902px\" \/><\/figure>\n\n\n\n<p>Usando um private endpoint, a comunica\u00e7\u00e3o \u00e9 para e por um endpoint que possui um IP dentro da VCN do cliente, al\u00e9m disso, caso queira \u00e9 poss\u00edvel que um banco On Premisse chegue no Data Safe(ou o Data Safe chegue no target) atrav\u00e9s de uma VPN ou fastconnect:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/docs.oracle.com\/en-us\/iaas\/data-safe\/doc\/img\/prem-private-endpoint-withicons.png\" alt=\"Network configuration for an on-premises Oracle database to connect to an Oracle Data Safe private endpoint\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">On-premise endpoint<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"214\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-6-1024x214.png\" alt=\"\" class=\"wp-image-507\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-6-1024x214.png 1024w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-6-300x63.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-6-768x161.png 768w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-6.png 1070w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Essa arquitetura \u00e9 um pouco diferente, com ela voc\u00ea precisa criar um On-Premise endpoint no OCI, baixar e instalar um pacote em uma m\u00e1quina na sua rede local que vai estabelecer um t\u00fanel com os endpoints p\u00fablicos do Data Safe.<\/p>\n\n\n\n<p>Nesse post vou abordar a ado\u00e7\u00e3o por IP P\u00fablico e tamb\u00e9m por Private endpoint.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ado\u00e7\u00e3o por Ip P\u00fablico<\/h2>\n\n\n\n<p>Para realizar a ado\u00e7\u00e3o pelo ip p\u00fablico, basta fazer login no Data Safe e ir em Targets -> Register :<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"870\" height=\"893\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-9.png\" alt=\"\" class=\"wp-image-513\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-9.png 870w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-9-292x300.png 292w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-9-768x788.png 768w\" sizes=\"auto, (max-width: 870px) 100vw, 870px\" \/><\/figure>\n\n\n\n<p>Ao entrar com o OCID do DbSystem(que voc\u00ea pega na primeira tela do servi\u00e7o) ele j\u00e1 vai selecionar o compartimento de forma autom\u00e1tica, depois disso basta informar o IP, porta e SERVICE_NAME(n\u00e3o \u00e9 poss\u00edvel conectar via SID), um ponto importante aqui \u00e9 que voc\u00ea precisa dar as permiss\u00f5es para o usu\u00e1rio que est\u00e1 usando como conector, essas permiss\u00f5es est\u00e3o no bot\u00e3o &#8220;Download privilege Script&#8221;, esse script possui alguns par\u00e2metros como por exemplo quais recursos do Data Safe esse usu\u00e1rio vai poder acessar:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"42\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-8-1024x42.png\" alt=\"\" class=\"wp-image-512\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-8-1024x42.png 1024w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-8-300x12.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-8-768x32.png 768w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-8-1536x64.png 1536w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-8.png 1765w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Recomendo que deem uma lida nele pois caso voc\u00ea queira remover as permiss\u00f5es, existem alguns pontos de aten\u00e7\u00e3o, nesse caso aqui podemos executar ele dando todas as permiss\u00f5es:<\/p>\n\n\n\n<p>@dscs_privileges.sql  dsadmin grant all<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"342\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-12-1024x342.png\" alt=\"\" class=\"wp-image-518\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-12-1024x342.png 1024w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-12-300x100.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-12-768x256.png 768w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-12.png 1222w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Por private endpoint<\/h2>\n\n\n\n<p>Na tela do Data Safe no OCI -> Connectivity Options, clique em Private endpoint e depois em Create:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"374\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-10-1024x374.png\" alt=\"\" class=\"wp-image-516\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-10-1024x374.png 1024w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-10-300x110.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-10-768x281.png 768w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-10-1536x561.png 1536w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-10.png 1856w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Depois do endpoint criado o  procedimento \u00e9 basicamente o mesmo que registrar pelo ip p\u00fablico, mudando apenas que voc\u00ea marca a op\u00e7\u00e3o <strong>Database With Private IP<\/strong> :<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"870\" height=\"893\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-11.png\" alt=\"\" class=\"wp-image-517\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-11.png 870w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-11-292x300.png 292w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-11-768x788.png 768w\" sizes=\"auto, (max-width: 870px) 100vw, 870px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"870\" height=\"468\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-13.png\" alt=\"\" class=\"wp-image-520\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-13.png 870w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-13-300x161.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-13-768x413.png 768w\" sizes=\"auto, (max-width: 870px) 100vw, 870px\" \/><\/figure>\n\n\n\n<p>Ap\u00f3s ele ser registrado, voc\u00ea pode verificar na tela de targets:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"329\" src=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-14-1024x329.png\" alt=\"\" class=\"wp-image-521\" srcset=\"https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-14-1024x329.png 1024w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-14-300x96.png 300w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-14-768x247.png 768w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-14-1536x493.png 1536w, https:\/\/adrianotanaka.com.br\/wp-content\/uploads\/2021\/05\/image-14.png 1569w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>O processo de ado\u00e7\u00e3o de um target \u00e9 bem simples, se voc\u00ea estiver usando um banco Autonomous(ADW,ATP), basta ir na tela de detalhes do banco e na parte do Data Safe clicar em register: Agora caso o seu target seja alguma das outras op\u00e7\u00f5es que o Data Safe suporta, voc\u00ea tem algumas op\u00e7\u00f5es para realizar [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"material-hide-sections":[],"footnotes":""},"categories":[8,6,1],"tags":[],"class_list":["post-492","post","type-post","status-publish","format-standard","hentry","category-oci","category-oracle","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/posts\/492","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/comments?post=492"}],"version-history":[{"count":10,"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/posts\/492\/revisions"}],"predecessor-version":[{"id":522,"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/posts\/492\/revisions\/522"}],"wp:attachment":[{"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/media?parent=492"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/categories?post=492"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adrianotanaka.com.br\/index.php\/wp-json\/wp\/v2\/tags?post=492"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}