Oracle Cloud Infrastructure Documentation

Public Safety and Security Events

Use OCI Audit and OCI Events to observe and respond to Public Safety and Security instance lifecycle operations.

Public Safety and Security instance API calls are recorded by OCI Audit. Asynchronous create, update, move, and delete operations associate their begin and completion activity with the work request returned by the operation.

Instance Operations

Events are generated for the instance lifecycle operations CreateInstance, UpdateInstance, ChangeInstanceCompartment, and DeleteInstance. The synchronous ListInstances and GetInstance calls are available through OCI Audit.

Event Rules

Use OCI Events rules to match the registered Public Safety and Security event types and route matching events to a supported action. Use the event's request and work-request identifiers to correlate an instance operation with its Audit and work-request records.

Event Policy

Ask an IAM administrator to grant the access your group needs. To list and view OCI Events rules in a compartment, use:

Allow group <group-name> to read cloudevents-rules in compartment <compartment-name>

To view the OCI Audit records for Public Safety and Security API activity in a compartment, use:

Allow group <group-name> to read audit-events in compartment <compartment-name>

Replace the group and compartment names. Reading a rule doesn't grant access to its delivered event payloads, and reading Audit records doesn't grant rule-management access. See the policy examples for these grants alongside metrics access.

To create or change Events rules, the group needs manage cloudevents-rules in the target compartment and the policies required for the selected action. The read-only policies above aren't sufficient for the creation procedure below.

Note

OCI Events and Audit records are different from Oracle Radio product audit records and internal application telemetry.

Creating an Event Rule

  • Create an OCI Events rule for the approved Public Safety and Security lifecycle event types that you want to route to an action.

    1. Open the OCI Console navigation menu, select Observability & Management, select Events Service, and then select Rules.
    2. Select the compartment in which to create the rule.
    3. Create a rule that matches Public Safety and Security events and the approved lifecycle event types for the instance operations that you want to monitor.
    4. Configure a supported action for matching events.
    5. Save the rule.

    OCI Events sends matching Public Safety and Security lifecycle events to the configured action.

  • Use the following command to create an enabled OCI Events rule with the approved condition and a supported action.

    Supply the --condition value with shell-safe quoting. The --actions value must be valid JSON or a file:// input that contains valid JSON.

    oci events rule create \
  --compartment-id <compartment-OCID> \
  --display-name <rule-name> \
  --is-enabled true \
  --condition <condition> \
  --actions <actions>

  • Run the OCI Events CreateRule operation to create an Events rule.