Security Attribute Namespaces
A security attribute namespace is a container for a set of security attributes in Zero Trust Packet Routing (ZPR).
When you enable ZPR, it creates a security attribute namespace in the tenancy named oracle-zpr
with an example security attribute named sensitivity
. If the security attribute namespace of a security attribute is omitted, ZPR defaults to the oracle-zpr
security attribute namespace.
Security attribute namespace names have specific naming conventions. The only valid characters for security attribute namespace names are as follows:
- 0-9
- A-Z
- a-z
- - (en dash)
- _ (underscore)
A security attribute namespace name must be unique across all security attribute namespaces in the tenancy and can't be changed. Also, you can't use a name that's in an ACTIVE status.
A security attribute namespace can have the following statuses:
- ACTIVE
- The namespace is active.
- INACTIVE
- The namespace has been deactivated.
- DELETING
- The namespace is in the process of being deleted.
- DELETED
- The namespace is deleted.
Every security attribute namespace must have a description. Descriptions don't have to be unique, and they can be updated later.
Only an inactive security attribute namespace can be deleted. To change the status of a security attribute namespace to inactive, you must retire it.
When you retire a security attribute namespace, all the security attributes in the namespace are retired, too. To reactivate the security attributes, you must reactivate each one individually after you reactivate the security attribute namespace.
See Managing Security Attribute Namespaces for operations you can perform to manage security attribute namespaces.