Updating an Application Instance

After an application instance is registered, change the credentials for the dedicated user, or the security control baseline, or other settings for the application.

For all application types, periodically you must update the credentials for the Oracle CASB Cloud Service user. Also, if you registered the application in Monitor Only mode, may want to change the baseline values for the application's security controls. This changes Oracle CASB Cloud Service's alerting threshold for the modified values.

Certain application types allow you to change other settings that you specified when you registered the application instance. See the application-specific topics with titles that begin with “Updating...”

Updating Login Credentials for an Application Instance

After an application instance is registered, update the login credentials whenever necessary.

You should regularly update the login credentials for the Oracle CASB Cloud Service user in your cloud applications. When this happens, you must also update the credentials in the Oracle CASB Cloud Service console so that monitoring can continue.

Note:

Not all applications take a user name and password. For example, Amazon Web Services credentials consist of a key pair (an access key and a secret key).

1. Select Applications from the Navigation menu. If the Navigation Menu is not displayed, click the Navigation Menu icon to display it.

   • In card view, click the icon for the instance you want to modify, and then in the Health Summary, select Modify, Update credentials.

   • In grid view, drop down the Action list for the instance you want to modify and select Update credentials.

   Tip:

   Alternatively, from the Dashboard or the Applications page, you can select Add/Modify App, Modify an app instance, Update credentials, and then select the application instance you want to modify and click Next.

2. Enter the credentials for the dedicated service account for Oracle CASB Cloud Service.

   These can be a user name and password, access keys, or other credentials depending on the application. For some applications, you are directed to the application's login service. You return to the Oracle CASB Cloud Service console after entering your credentials. For additional information about the Oracle CASB Cloud Service user's credentials, see Preparing Cloud Applications for Monitoring.

3. If you see a Test Credential button, click it.

   Some application types require you to test the credentials at this point, while others don’t.

   It can take a minute to test your credentials.

4. When you see a success message for the test of your credentials, click Submit.

Updating the Security Control Baseline for an Application Instance

After an application instance is registered, update the security control baseline settings as needed.

Oracle CASB Cloud Service generates alerts in the Risk Events page if the corresponding security control value in the application differs from the Oracle CASB Cloud Service baseline. To change these baseline values, you modify the application instance.

Security controls (for example, minimum password and session length) are one of three primary types of risk that Oracle CASB Cloud Service monitors for. When you register an application instance, you let Oracle CASB Cloud Service use its built-in defaults as a baseline, or you let Oracle CASB Cloud Service set various security control values in the application, after which Oracle CASB Cloud Service monitors for drift from the new baseline.

Note:

You can’t change from monitor-only mode to "push-and-monitor" mode (having Oracle CASB Cloud Service set the baseline values in the cloud application). To switch monitoring modes, you must delete the instance in the Oracle CASB Cloud Service console and re-register it.

1. Select Applications from the Navigation menu. If the Navigation Menu is not displayed, click the Navigation Menu icon to display it.

   • In card view, click the icon for the instance you want to modify, and then in the Health Summary, select Modify, Update credentials.

   • In grid view, drop down the Action list for the instance you want to modify and select Update credentials.

   Tip:

   Alternatively, from the Dashboard or the Applications page, you can select Add/Modify App, Modify an app instance, Update credentials, and then select the application instance you want to modify and click Next.

2. Select the baseline level that you want:

   • Standard: Use the application's built-in defaults.

   • Stringent: Use Oracle CASB Cloud Service's suggested defaults.

   • Custom: Set the values that you want for each security control.

     See Security Control Values for AWS (Push Controls/Read-Write).

3. When you are done, select the Confirmation check box, and then click Submit.

   A confirmation message appears