Oracle Cloud Infrastructure

Oracle Cloud Infrastructure

May 21, 2024 | permanent

Summary #

Cloud Computing Services in Saudi Arabia KSA https://www.oracle.com/sa/ Cost Calculator shared to me by Omar Al Nahdi Advanced Support

OCI is built on 5 pillars #

[ref](https://k21academy.com/1z0-1072/iam-in-oci-user-groups-compartment-policy-tags-federation-mfa/#:~:text=The%20Oracle%20Cloud%20Infrastructure%20(OCI,%2C%20Compute%2C%20Storage%20%26%20Database.)

  1. IAM in OCI
  2. Networking in OCI
  3. Compute in OCI,
  4. Storage in OCI, &
  5. Database in OCI

Observation #

<2023-06-21 Wed> JAK: out of all the other options, this is more mature with wide relevant options. I did not the comparison though.

Infrastructure for Fintech and Financial services #

https://www.oracle.com/sa/industries/financial-services/cloud/

Highlights #

  • Meet regulatory requirements and drive more innovation with hybrid cloud strategies
  • Build new banking applications to improve customer experience
  • Transform data into winning insights for your line of business

Open Banking APIs #

https://www.oracle.com/industries/financial-services/banking/banking-apis/#rc30p2

Targets are banks

Application development on OCI #

https://www.oracle.com/sa/application-development/ It’s time to build. On Oracle Cloud Infrastructure (OCI), developers find a comprehensive portfolio of tools and developer services to build new cloud native applications, modernize, and extend enterprise applications.

Why develop applications on OCI? #

Modern services from code to production #

Develop and ship faster with OCI developer services. From Low Code to Containers, CI/CD, and monitoring, everything you need is here.

Explore AppDev services

Use your tools and tech #

Bring your stack—Argo CD, Github, GitLab, Jira, jenkins, Datadog, PostgreSQL, Redis, and others plug right in.

See reference architectures

Build on open source #

Managed Kubernetes, Terraform, MySQL, OpenSearch, and other services based on popular projects and frameworks keep your skills and apps portable.

Explore cloud native

Object Storage #

URL Oracle Cloud Infrastructure (OCI) Object Storage enables customers to securely store any type of data in its native format. With built-in redundancy, OCI Object Storage is ideal for building modern applications that require scale and flexibility, as it can be used to consolidate multiple data sources for analytics, backup, or archive purposes.

Using django-storage #

OCI Object Storage is full compatible with AWS S3 API. github discussion

Database #

PostgreSQL #

How to Deploy Using Terraform the deployment can done, but still this is not managed service.

MySQL #

Fully managed https://www.oracle.com/sa/mysql/ fully managed service

  • MySQL HeatWave Database Service
  • Fully managed service

One MySQL Database service for transactions, analytics, and machine learning (ML). Real-time, secure analytics without the complexity, latency, and cost of extract, transform, and load (ETL) duplication. Available on Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), and Microsoft Azure.

No changes to MySQL applications #

HeatWave is a native MySQL solution. Current MySQL applications work without changes.

JAK Observation: this fully managed db should work with

Built, managed, and supported by the MySQL engineering team #

Developers can deliver modern, cloud native database applications with immediate access to the latest features from the MySQL team. MySQL security patches are automatically applied to limit exposure to security vulnerabilities. MySQL HeatWave is 100% compatible with on-premises MySQL for a seamless transition to the cloud without changes to applications.

Datascience and AI #

https://www.oracle.com/sa/artificial-intelligence/data-science/

Python and Django #

Python Deploy Python Flask App

Django in OKE

API manager #

https://www.oracle.com/sa/cloud/cloud-native/api-management/

Security #

Financial Services #

https://www.oracle.com/sa/financial-services/cloud/#tab1

Meeting #

  • ahmed muqtar account manager

jedda alreday, 2nd neom , eastern province,

  • workloads can be hosted in 40 data center across the world
  • kubernetes engine OKE, 85 Dollars/month

Questions #

  • architecture implementation help
  • best possible option
  • cost estimation
  • LLM?
  • Open banking compliance
  • Saudi cyber security complaince
  • 900 GB on vertical scale possible
  • auto scaling horizantal scaling
  • paulo alto firewall as service as ocr,
  • web application firewall service before firewall, rate limit, traffic monitoring and distribution
  • loggin services free, cloud free, threat services free
  • observability,
  • credit are like nol card 25000,
  • after credit is finished monthly billing happens on average usage
  • 4000 $/year also
  • 4million $/year clients
  • adapter
    1. Cost estimation

    2. Get started with implementation

  1. number of cores, rams,
    • no. of cores,

    • OCPU is physical cpus api gatway 1 million free

    • after first hour, remaining time it will be per/sec

    
  • archive is 10 times cheaper.
    • when pdf data is required from to be accessed from archive bucket, it needs to be restored first and the charge on restored data will be equal to standard bucket cost.

Purchasing Services in Saudi Arabia #

Subscription #

  • Based on our requirements they will give us an estimation of charges that might be incurred for an year
  • The bills can be split in 4, quarterly,
  • upon payment they will credit that amount to our account, resources of this much amount can be consumed and if more resource used that will be charged These things were discussed in this meeting: meeting: OCI meeting for the invoicing-apis deployment to get estimates and start the project
  • The credit will be valid for 1 year and cannot be carry forwarded to next year
  • minimum credit 5000$ per year should be purchased
  • there are exception they gave 2000$/year

estimates 1 estimate 2 estimate 3

Oracle Functions #

API Gateway #

:ID: 992B8869-57CF-44D4-95CC-FB3673D42D2A

OCIR #

Oracle Cloud Infrastructure Registry

Submission form to get access to AI services #

  • in this meeting
    • form link was shared by the the OCI team to fill to get access to LLM chicago region
    • suggested by Samir El-Nabawy to first setup llm infra in chicago and when these service are available in Saudi region, move the infra to Saudi region.

OCR of Images #

2024-05-21_13-17-12_screenshot.png #

OCIService Pillars

2023-02-14_12-03-29_screenshot.png #

Learn how a mature packaged API cloud service can help banks accelerate their transformation into an open API platform Banks and fintechs have realized that collaboration is the best way forward. Customer-based data ownership is the new normal. Oracle Banking APls allows banks and fintechs to partner with each other to provide customers with the best of both worlds while managing their consent and data security. Orchestrate your open API strategy with a single, scalable Reduce the API creation and customization process from 01 cloud service 02 months to days Oracle Banking APIs is an end-to-end, cloud-first API banking solution that offers APIs, a foundational framework, a sandbox, an API library, and More than 1,800 ready to deploy RESTful APIs and an API toolkit allow banks to get started with API banking instantly. management and monetization. Partner with innovative financial service providers and 03 offer customers the latest in banking technology Reduce the total cost of ownership through integration with 04 your bank's existing technology Oracle's fintech cohort provides banks with instant access to more than 50 fintechs with innovative offerings in Al, corporate, regtech, retail, The cloud service equips banks to rationalize and de-duplicate services connecting their technology landscape to help them gain cost and wealth, and more. operational efficiencies.

2023-09-17_10-07-56_screenshot.png #

jaavedkhan jaavedkhan Samir El-N Nabawy Samir El Nabawy Ahmed Ahmed Samir El-Nabawy Senior Account Cloud Engineer Oracle Cloud Solutions Engineering ORACLE

2023-09-17_11-07-55_screenshot.png #

ORACLE Cloud Search resources, services, documentation, and Marketplace Saudi Arabia West (Jeddah) V Create Bucket Help bject Storage & Archive torage Buckets in S Object Storage provide: Bucket Name bucket-20230917-1207 Default Storage Tier Standard Archivel Buckets Create Bucket Name st scope ompartment Samir.El.Nabawy 01735A9B55E5ACDD A441C2 - The default storage tier for a bucket can only be specified during creation. Once set, you cannot change the storage tier in which a bucket resides. Learn more about storage tiers 01735A9B55E5ACDD seemeaodmeta (rooty/AsifTeam/Samir ELNabaw A441C2_001 Enable Auto-Tiering Automatically move infrequently accessed objects from the Standard tier to less expensive storage. Learn more 01735A9B55E5ACDD A441C2.assetstorage 01735A9B55E5ACDD A441C2 caasjobobjer 01735A9B55E5ACDD A441C2 contentrendi 01735A9B55E5ACDD A441C2 dedup 001 Encryption Enable Object Versioning ervice logs Manage logs Create an object version when a new object is uploaded, an existing object is overwritten, or when an object is deleted. Learnmore esources: 16 (32 total logs) 0 gs enabled: 0 gs not enabled: 32 Emit Events Object : Create automation based on object state changes using the Events Service. Uncommitted Multipart Uploads Cleanup Create a lifecycle rule to automatically delete uncommitted multipart uploads older than 7 days. Learnmore g filters tag filters applied add clear Encrypt using Oracle managed keys 01735A9B55E5ACDD Leaves all encryption-related matters to Oracle. A441C2 other_001 01735A9B55E5ACDD Create Cancel erms of Use and Privacy Cookie Preferences Copyright @ 2023, Oracle and/or its affiliates. All rights reserved.

2023-09-27_19-47-19_screenshot.png #

Oracle Functions Pay per use Pay for execution, not for idle time Functions-as-as-a-Service Oracle Cloud Integrated Autonomous Platform auto-scales functions No servers to provision, manage Container Native Open Source Secure Event-driven Oracle Cloud Infrastructure triggers to run your code

2023-09-27_19-48-10_screenshot.png #

How does it work? - lo - E Push function image to registry Configure function trigger Code runs only when triggered Pay for code execution time only

2023-09-27_19-49-38_screenshot.png #

Functions Integrations OCI Registry Events Service Object Store 2 Pull image Notifications Autonomous DB/DW 1 3 Service Connectors (Logs, Data Streams) Secrets Trigger Can use API Gateway Send logs, metrics, traces Compute 4 Oracle Integration Network Monitoring, Logging, APM CLI/SDK other services

2023-09-27_19-50-19_screenshot.png #

Events Service Real-time, fast alerts on state change Write to Stream Resource CRUD Lifecycle Changes OCI Services (Compute, Storage, Network, etc.) System Events Invoke an Oracle Function Customer-defined rules I - cloudevents Send Notifications

2023-09-27_19-50-51_screenshot.png #

Notifications Service Fully-managed Multitenant, pub-sub pattern Email a00 Oracle Events Integrated with OCI services n Oracle Monitoring Oracle Functions Events, Monitoring, Service Connector Hub Notifications Topic Service Connector Hub HTTPS Endpoint Supports a wide array of endpoints Applications PagerDuty Email, PagerDuty, Slack, Functions, HTTPS d slack

2023-09-27_19-51-05_screenshot.png #

Service Connector Hub Full visibility into data movement ORACLE ud Create Service Connector dor Centralized experience to view, secure, and manage all data movement in the cloud Take near real-time actions Easily emit log-based metrics 2 One-click log archival Automated remediation & alerting with Functions and Notifications Integrate with 3rd party tools Seamlessly move data to any destination using Kafka-compatible OCI Streaming

2023-09-27_19-52-16_screenshot.png #

"fn init" Generates Boilerplate Hello World Function 1 package com. example.fn; 2 3 public class HelloFunction ( 4 5 6 7 8 9 ) 10 11 ) public String handleRequest(String input) f String name == (input = null II input.isEmpty0) ? "world" : input; return "Hello, 1 + name + !";

2023-09-27_19-52-37_screenshot.png #

fn deploy 1. Builds the container image (multistage) 2. Pushes the container image to registry 3. Creates/updates the function metadata 1 L 2 3 Your code Oracle Functions myfunc  myfunc:0.0.2 memory, timeout, etc. MyFunc:0.0.2 MyFunc:0.0.2 MyFunc:0.0.2 OCIR OCIR

2023-09-27_19-53-17_screenshot.png #

Functions Configuration Memory Timeout Environment variables (config) - Service limits

2023-09-27_19-53-59_screenshot.png #

Functions Observability Metrics Logs - Traces - Troubleshooting: Error codes, description, and resolution steps

2023-09-27_19-55-47_screenshot.png #

Using Other Services Object Store Granular access control Autonomous DB/DW Functions Resource Principals Secrets Private / Service Gateway Can use Compute Public / Internet Gateway Network other services

2023-09-27_19-59-26_screenshot.png #

What is an API? Programming Languages Web Services Packages or libraries Imported or referenced Encapsulates implementation Defined contract Remote execution Encapsulates implementation Defined contract Local execution Implementation agnostic Decoupled Java" Platform Standard Ed. AI Classes Packages Overview Package Class Use Tree Deprecated Index Help Prev Next Frames NoF Frames Java TM Platform, Standard Edition 7 API Specification See: Descrption a cka javaapplet ava awt java awt color ava awt nat fer ava Oracle Cloud Infrastructure Decumentation APIReference andEndpoints GetApi Thisd document is the API speciication for the. Java' Platform, Standard Edtion. Requ Description Prevides te dasses necessary to vreate an appl communicate with a pplet context Contains al o the classes for creating user interfi Provides classes for color spaces Provides interlaces ande dasses for transferring d Drag and Drop direct nani pulation gesture Phat provides e ranster infom All Classes bstra

2023-09-27_19-59-53_screenshot.png #

What is an API? I - API Gateway E Clients Web Service

2023-09-27_20-00-21_screenshot.png #

Description Policies Implementation

2023-09-27_20-00-39_screenshot.png #

Elements of an API Postman Stoplight Description Contract between consumer and provider Swagger Editor Code Editor implementation-agnostic way to describe the behavior OPENAPI Learn more at htp/www.openapis.org

2023-09-27_20-00-57_screenshot.png #

Postman Stoplight Description Contract between consumer and provider Swagger Editor Code Editor Auth, SLA, etc. Policies Validation/Transformation/Routing Metrics, alarms, and logging API Gateway OKE Helidon Compute Delivers the functional requirements Choice of technology is open Implementation Functions ORDS/APEX Saas Integration Etc.

2023-09-27_20-01-15_screenshot.png #

What is an API Gateway? Mediation Bare Metal Compute m m e mm - DRG Containers - Customer Data Center Security Monitoring 1AN API Gateway Container For cainerErgine API Gateway Functions SUBNET

2023-09-27_20-01-56_screenshot.png #

ay: Introduction to APIManagement 361 Oracie Cloud Infrastructure API Gateway Serverless policy enforcement point Authorization, rate-limiting, and routing Request validation Request/response transformation Response caching Public or private endpoints Custom domains API visibility Integrated logging and metrics Advanced logging analytics

2023-09-27_20-02-42_screenshot.png #

Cloud Infrastructure Architect Professional eway: Introduction to API Management Oracie Cloud infrastructure API Gateway API design OpenAPI 2 and 3 supported Built in mock-testing API consumption SDK generation

2023-09-27_20-03-15_screenshot.png #

Networking Oracle Cloud Infrastructure (Region) Virtual Cloud Network VCN AD1 AD2 AD3 Subnet A Public Subnet (Regional) 10.0.30.0/24 Public VS. Private Subnets CAD API Gateway Regional Subnets Subnet B Private Subnet (Regional) 10.0.40.0/24 QAD API Gateway Security lists Route Tables

2023-09-27_20-03-50_screenshot.png #

Policies Oracle Cloud Infrastructure (Region) Group Policies Resource Policies VCN AD1 AD2 AD3 Subnet A Public Subnet (Regional) 10.0.30.0/24 Network Resources Functions API Gateways Subnet B Private Subnet (Regional) 10.0.40.0/24 Functions Logging

2023-09-27_20-04-19_screenshot.png #

Policies Oracle Cloud Infrastructure (Region) Group Policies Resource Policies VCN AD1 AD2 AD3 Subnet A Public Subnet (Regional) 10.0.30.0/24 Network Resources Functions AD API Gateway API Gateways Subnet B Private Subnet (Regional) 10.0.40.0/24 Functions Logging

2023-09-28_17-00-03_screenshot.png #

Introducing Oracle Cloud Infrastructure Registry (OCIR) A high availability Docker v2 container registry service. What is it? Stores Docker images in private or public repositories. Runs as a fully managed service on Oracle Cloud Infrastructure. Without a registryit is hard for development teams to maintain a consistent set of Docker images for their containerized applications. What problems does it solve? Without a managed registry it is hard to enforce access rights and security policies for images. Itis hard to find the right images and have them available in the region of deployment. Container Registry is an Open Container Initiative-compliant registry.