Oracle Cloud Infrastructure Documentation

OCI Cache Clusters

Create and manage OCI Cache clusters for memory-based storage solutions.

After the cluster is created, OCI Cache handles most of the management and operations for the cluster, including operations such as security updates, upgrades, and resizing.

Required IAM Policy

To use all OCI Cache features, you must have the following permissions:

  • Manage clusters and work requests.
  • Manage Network resources.

Example policy:

Allow group ClusterAdmins to manage redis-family in compartment <YOUR_COMPARTMENT>
Allow group ClusterAdmins to use virtual-network-family in compartment <YOUR_COMPARTMENT>

See OCI Cache IAM Policies for detailed policy information and more examples.

If you're new to policies, see Getting Started with Policies and Common Policies.

Tagging

If you have permissions to create a resource, then you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags. If you're not sure whether to apply tags, skip this option or ask an administrator. You can apply tags later.

Zero Trust Packet Routing Support on OCI Cache

The Zero Trust Packet Routing support enhances security management capabilities within OCI Cache by enabling you to add, view, and edit security attributes associated with clusters in your tenancy. To access this functionality, see Creating a OCI Cache Cluster.

After creating a security attribute namespace, you can define security attributes within the namespace and apply them to OCI Cache clusters that you want to protect with Zero Trust Packet Routing. You can then write a Zero Trust Packet Routing policy that protects the cluster from any unauthorized access. See Policy examples.

Tip

You can control network access to OCI Cache clusters by applying security attributes to them and creating policies to control communication among them. For more information about Zero Trust Packet Routing, see Zero Trust Packet Routing.

You can perform the following tasks: