> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Oracle Cloud Infrastructure

> Connect Oracle Cloud Infrastructure to Myrmex — read your tenancy configuration on demand, audit posture, and remediate findings.

import { Frame, Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **Oracle Cloud Infrastructure (OCI)** tenancy so Myrmex can read your resource configuration, audit your cloud security posture, and help you fix misconfigurations. Myrmex reaches the OCI APIs through a [Collector](/documentation/agent-endpoint-security/collector-mode) using a dedicated API-signing user — everything is read in real time, on demand, and nothing from your tenancy is stored on the Myrmex side.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read and inventory" icon="magnifying-glass">
    Enumerate compartments and resources — Compute, Object Storage, IAM, and networking — for read-only analysis.
  </Card>

  <Card title="Cloud posture audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit against your tenancy using CIS, ISO 27001, and NIST controls.
  </Card>

  <Card title="Find misconfigurations" icon="triangle-exclamation">
    Surface public buckets, overly permissive policies, and risky network security rules.
  </Card>

  <Card title="Guided remediation" icon="wrench">
    Get prioritized fixes and, on approval, apply changes to close the gaps.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed where it can reach the OCI APIs over HTTPS. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* An OCI account with the **Cloud Administrator** role, to create the authentication user, group, and policy.
* Your **Tenancy OCID** and the **home region** identifier.

## Step 1 — Create the Credential in OCI

<Steps>
  <Step title="Gather your tenancy information">
    Note your **Tenancy OCID** from the Tenancy details page, and your **home region** identifier. Make sure the home region is selected in the top-right corner of the console.
  </Step>

  <Step title="Deploy the Myrmex policy stack">
    From the Myrmex OCI integration tile, use **Create Policy Stack** to run the Myrmex Resource Manager template. It creates a `MyrmexAuthUser`, its group, and a narrowly scoped policy. Deploy this once per tenancy, accepting the defaults.
  </Step>

  <Step title="Get the user OCID">
    In the OCI console, search for `MyrmexAuthUser`, open the user, and copy its **OCID**.
  </Step>

  <Step title="Generate an API key">
    On the user page, under **Resources → API keys**, click **Add API key**, choose **Generate API key pair**, and **Download private key**. Click **Add**, then copy the **fingerprint** that is shown.
  </Step>
</Steps>

## Step 2 — Add the Integration in Myrmex

In the **Directory**, choose **Add Integration → Oracle Cloud Infrastructure** and fill in:

| Field            | Description                                                                                                     |
| ---------------- | --------------------------------------------------------------------------------------------------------------- |
| **Tenancy OCID** | The OCID of the tenancy you want to monitor.                                                                    |
| **User OCID**    | The OCID of the `MyrmexAuthUser` created by the policy stack.                                                   |
| **Fingerprint**  | The fingerprint of the API key you generated.                                                                   |
| **Private Key**  | The full contents of the downloaded `.pem` file, including the `BEGIN PRIVATE KEY` and `END PRIVATE KEY` lines. |
| **Region**       | Your tenancy's home region identifier.                                                                          |
| **Collector**    | The [Collector](/documentation/agent-endpoint-security/collector-mode) that will reach the OCI APIs.            |

## Connect

Click **Connect** to validate the credentials and finish. The tenancy then appears under **Environment → Integrations**, and you can start asking the AI about it in the Workspace.

<Note>
  The policy stack grants `MyrmexAuthUser` a least-privilege, read-oriented policy. Keep it read-only for analysis and broaden it only when you want the agents to apply changes.
</Note>