Connect to OCI Object Storage

Learn to create a connection to OCI Object Storage to use as a target with OCI GoldenGate.

Related Topics

Before you begin

If you want to use resource principals to authenticate and connect to an OCI resource, ensure that you:

For more information, see Minimum required policies for OCI GoldenGate.

Create the connection

To create an OCI Object Storage connection:
  1. From the OCI GoldenGate Overview page, click Connections.
    You can also click Create Connection under the Get started section and skip to step 3.
  2. On the Connections page, click Create Connection.
  3. On the Create Connection page, complete the fields as follows:
    1. For Name, enter a name for the connection.
    2. (Optional) For Description, enter a description that helps you distinguish this connection from others.
    3. For Compartment, select the compartment in which to create the connection.
    4. For Type, select OCI Object Storage.
    5. For Tenancy, select one of the following options:
      • Use current tenancy
      • Specify another tenancy, and then enter the Tenancy OCID
    6. For Region, select the OCI Object Storage region.
    7. For User, select one of the following options:
      • Use current user
      • Use resource principal
      • Specify another user, and then enter the User OCID.
    8. For Private key, drag and drop or select the Privacy enhanced mail (PEM) file.
      • You can create and download the API key on your user details page, and then upload it here.
      • To use Private key secrets, ensure that you select Use secrets in vault in the Settings tab under Advanced Options, located at the bottom of this form.
    9. (Optional) For Private key passphrase, enter the corresponding public key fingerprint.

      Note:

      To use Private key passphrase secrets, ensure that you select Use secrets in vault in the Settings tab under Advanced Options, located at the bottom of this form.
    10. For Public key fingerprint, enter the corresponding public key fingerprint.
    11. For Network connectivity, select a Traffic routing method:
      • Shared endpoint, to share an endpoint with the assigned deployment. You must allow connectivity from the deployment's ingress IP.
      • Dedicated endpoint, for network traffic through a dedicated endpoint in the assigned subnet in your VCN. You must allow connectivity from this connection's ingress IPs.

        Note:

        • If a dedicated connection remains unassigned for seven days, then the service converts it to a shared connection.
        • Learn more about Oracle GoldenGate connectivity.
    12. Expand Show advanced options. You can configure the following options:
      • Security
        • Select Use Oracle-managed encryption key to leave all encryption key management to Oracle.
        • Select Use customer-managed encryption key to select a specific encryption key stored in your OCI Vault to encrypt your connection credentials.
      • Settings
        • Select Use vault secrets to use a password secret for your connection.
      • Tags: Add tags to organize your resources.
  4. Click Create.
After the connection is created, it appears in the Connections list. Ensure that you assign the connection to a deployment to use it as a source or target in a replication.

Known Issues

User OCID Mismatch in OCI Object Storage connection (Federated users only)

If a federated user selects Use current user when creating an OCI Object Storage connection, their OCID doesn't match the OCID picked up by the system.

Workaround: When you create an OCI Object Storage connection, ensure that you choose Specify another user, and then enter the federated user's OCID.

To find the user OCID, click Profile in the Oracle Cloud console global header, and then select the user name. On the User Details page, under User Information, click Show for OCID.