OCI-018 Oracle Cloud Infrastructure (OCI)

Compute instances have no unintended public IPs.

Compute instances have no unintended public IPs.

Domain
Oracle Cloud Infrastructure (OCI)
Area
Compute
Automated / manual
Manual

Risk if it fails

Unintended public hosts expand attack surface.

Every internet-facing server is a target. An unintended public box running an unpatched service is an easy first foothold for an intruder.

How Tess tests it

1 test — each concludes only on cited evidence.

Compute instances have no unintended public IPs.

Manual
Procedure
List instances/VNIC attachments with public IPs and validate.

Read-only command 

oci compute instance list --compartment-id <compartment-ocid> --all (then review public IP assignments)

More in Oracle Cloud Infrastructure (OCI)

OCI-001 MFA is enforced for all IAM users, especially administrators. OCI-002 Customer secret keys / API keys are rotated regularly (<=90 days). OCI-003 A strong password policy is configured. OCI-004 Membership of the Administrators group is minimal.

Want Tess to test OCI-018 against your evidence?

Book a demo