Autonomous Database: taking Oracle's most secure database to the next level
summary
Autonomous Database enforces AES encryption at rest and TLS/mTLS in transit, patches the full Exadata stack in rolling windows, and removes OS/SYSDBA access so clients connect only via SQL. Key options include AES256 at tablespace level and OCI Vault customer-managed keys with zero-downtime rotation; wallets support instance or regional scopes. Auditing keeps unified audit for 14/90 days and Data Safe extends retention to seven years and offers Data Safe — security assessment, user assessment, activity auditing, data discovery, data masking. Privilege Analysis, Database Vault and data redaction reduce blast radius and enable least-privilege.
AI-written summary · about
chapters (17)
- 0:00Oracle Autonomous Database intro
- 1:49Self-securing features
- 5:03Encryption and key management
- 7:10Oracle Data Safe security
- 9:23Data Safe assessment overview
- 10:29Security findings and compliance
- 12:17User auditing in Data Safe
- 13:23Sensitive data discovery
- 14:27Data masking for non-prod
- 15:56OCI Identities integration
- 17:20Azure AD user auth
- 19:55Azure AD security benefits
- 22:06Privilege analysis
- 25:21Database Vault access control
- 28:15Real-time data masking
- 30:11Security enhancements summary
- 32:41Conclusion
related talks
01mAutonomous Database
31mAutonomous Database: Simplify your database management
24mAutomate Data Management with Autonomous Database
29mDatabase: What's new, what's next
27mAutomating Data Management for All
15mBest Practices for Securing Oracle Database
19mMission-critical databases made simple
28mBest practices for migrations to Autonomous Database