DBA Tasks in Oracle Autonomous Database
- 1. Sinan Petrus Toma Senior Solution Engineer | Oracle Database & Cloud Architect @Oracle June 17, 2020 DBA Tasks in Oracle Autonomous Database
- 2. Passionate about Cloud & Database Technologies Sinan Petrus Toma Senior Solution Engineer MS SQL ServerJava, Oracle PHP, MySQL Oracle DBA Oracle Cloud 2009 2020
- 3. My company migrated all our Oracle databases to Autonomous Database! What I‘m going to do?
- 4. 4 Self-Driving Self-Securing Self-Patching Configuration, Tuning Storage Management Automatic Backup TDE SQL*Net, Backup Enc. Database Auditing Release Updates Security Patches Upgrade
- 5. 5 Infrastructure Administration High Availability Network Storage Server OS access SYSDBA access SLA 99.95%
- 6. 66
- 7. 77
- 9. 9 Autonomous Database | Deployment Options Dedicated X X Shared Oracle Services NetworkVCN
- 10. 10 User Management, Roles and Permissions CREATE USER, ALTER USER CREATE ROLE, GRANT, REVOKE CREATE PROFILE, CREATE TABLESPACE (dedicated)
- 11. 11 Connection Wallet (Client Credential) download, save in secure location, share with authorized users, rotate if needed create, provide for download
- 12. 1212 10.0.0.3 IP Notation Type IP Addresses IP Address 141.143.193.77 ACL OCI RegionOn-Premise 141.143.193.77 InternetTCPS 1522 Xx.x.x.x Basement X Oracle Services Network Wallet Rotation Wallet Rotation
- 13. 13 Access Control List (ACL)
- 14. 14 SERVICES NAME RESOURCE MANAGEMENT PLAN SHARES PARALELLISM Concurrent Statements TP URGENT 12 Manual 300x CPU COUNT TP 8 1 300x CPU COUNT HIGH 4 CPU COUNT 3 Queries MEDIUM 2 max 4 1.25x CPU COUNT LOW 1 1 300x CPU COUNT • Pre-defined database services controlling priority and parallelism • Different services defined for Transactions and Reporting/Batch For Transaction Processing For Reporting or batch processing Pre-defined Database Service Names
- 16. CPU & Storage Scaling 16
- 17. 17 Scale Up & Down
- 19. 19 SQL Monitoring & Tuning
- 20. 20 Alert log & Trace Files SELECT originating_timestamp, message_text, module_id, process_id, filename FROM v$diag_alert_ext ORDER BY originating_timestamp DESC; SELECT trace_filename, modify_time FROM v$diag_trace_file ORDER BY modify_time DESC; SELECT timestamp, payload, trace_filename FROM v$diag_trace_file_contents WHERE trace_filename = '<trace_filename>' ORDER BY timestamp DESC; Without access to operating system
- 21. 21 Manual Backups Setting Up a Bucket to Store Manual Backups https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/adbbackingup.htm#creatingbucket ALTER DATABASE PROPERTY SET default_bucket = … DBMS_CLOUD.CREATE_CREDENTIAL ( … ) ALTER DATABASE PROPERTY SET default_credential = …
- 22. 22 Restore
- 23. 23 Flashback FLASHBACK TABLE <table_name> TO BEFORE DROP;
- 24. Hot PDB Cloning Production Development Metadata only Full Clone Test 24
- 26. 26 Data Loading | Data Pump Supports Encryption, Parallelism and Compression expdp dump files local storage dump files object storage impdp upload MV2ADB move data to Autonomous Database in "one-click" (Doc ID 2463574.1)
- 27. 27 Deutschsprachiger Datenbank & Cloud Technologie Blog https://blogs.oracle.com/coretec/autonomous-db Autonomous Database Schema Advisor Light-weight utility that analyzes the on-premise or cloud Oracle Database schemas for the suitability of migration to the Autonomous Database Doc ID 2462677.1 https://blogs.oracle.com/coretec/gewusst-wie-oracle- database-advisor-pre-check-f%c3%bcr-autonomous-database
- 28. 28 Security | Database Vault Available on Autonomous Database Create DV Owner and Account Manager Users Activate DV Create DV Realms GRANT CREATE SESSION TO dvo IDENTIFIED BY "Feuerwehr#112"; GRANT CREATE SESSION TO dvam IDENTIFIED BY "DiePolizei#110"; EXEC DBMS_CLOUD_MACADM.CONFIGURE_DATABASE_VAULT(dvowner_uname => 'DVO', dvacctmgr_uname => 'DVAM'); EXEC DBMS_CLOUD_MACADM.ENABLE_DATABASE_VAULT; exec DVSYS.DBMS_MACADM.CREATE_REALM(realm_name => 'HR_DATA', description => 'PII Data', enabled => 'Y', audit_options => '1'); exec DVSYS.DBMS_MACADM.ADD_OBJECT_TO_REALM(realm_name => 'HR_DATA', object_owner => 'HR_DATA', object_name => '%', object_type => '%');
- 29. 29 Security | Data Redaction DBMS_REDACT.add_policy( object_schema => 'ADMIN', object_name => 'payment_details', column_name => 'card_string', policy_name => 'redact_card_string', function_type => DBMS_REDACT.partial, expression => '1=1', function_parameters => 'VVVVFVVVVFVVVVFVVVV,VVVV-VVVV-VVVV-VVVV,#,1,12');
- 30. 30 Security | Auditing Unified Auditing enabled by default Policies enabled by default Additionllay define you own policies CREATE AUDIT POLICY datapumpactivities PRIVILEGES SELECT ANY TABLE ACTIONS COMPONENT = DATAPUMP ALL; API Audit Logs VCN Flow Logs
- 31. 31 Databases in Oracle Cloud Audit …..Users DiscoverAssess Mask Unified Database Security Control Center Security Assessment User Assessment User Activity Auditing Sensitive Data Discovery Sensitive Data Masking Saves time and mitigates security risks Defense in Depth for all customers No special security expertise needed Security | Data Safe
- 32. 32 DBSAT vs. Data Safe DBSAT Data Safe Security Assessment Yes yes User Risk Assessment and Drill-Down to Audit Records No Yes User Activity Auditing and Reporting No Yes Sensitive Data Discovery Limited Yes Data Masking No Yes Multiple Targets at the same time No Yes Modern GUI No Yes Reports History No Yes Supported Targets On-Premise Cloud
- 33. 33 Data Masking Production Test Development Full Clone Sensitive Data Discover Data Safe Sensitive Data Masking
- 34. 34 Security | Data Safe
- 35. 35 Security is Shared Responsibility! Encryption Transparent Data Encryption Backup Encryption SQL*Net Encryption Access Control Access Control Lists Private Endpoints* System & Data Protection Database Vault High Privileges Restrictions Sensitive Data Oracle Label Security Data Redaction Data Safe Auditing Database Auditing API Audit Logs* VCN Flow Logs* SQL Command Restrictions Network Security Groups* Wallet Rotation Data MaskingSelf Patching * OCI Security Features
- 36. Cloud Services Management • OCI CLI: Command Line Interface to complete OCI tasks – Provides the same core functionality as the Console, plus additional commands – Run scripts to extend the Console's functionality • Stop the database when not needed and start it again on demand • Scale up, run big query, and scale down again • OCI Auditing • Documentation – https://docs.cloud.oracle.com/iaas/Content/API/Concepts/cliconcepts.htm 36
- 37. 37 https://github.com/sinanpetrustoma/autostopping Auto Stopping & Starting
- 38. 38 https://www.linkedin.com/pulse/automate-data-pump-export-autonomous-database-incl-copy-petrus-toma/ Data Pump Export for Archiving
- 39. 39 Infrastructure as Code | Terraform
- 40. 40 Siri, Create Autonomous Database
- 41. 41 ShortCuts
- 42. User & Privileges Management Wallet Management Network Access Control Resource Monitoring & Scaling SQL Monitoring & Tuning Manual Backup, Restore & Flashback Cloning & Testing before Upgrade Security Configuration & Control More Automation Data Loading & Migration
- 43. 4343 NSG Rule Stateless Source Ingress No 10.0.2.0/24 private:10.0.2.0/24 VCN: 10.0.0.0/16 10.0.2.2 X Oracle Services Network 10.0.2.3 SLpublic:10.0.1.0/24 Rule Stateless Source Ingress Egress No No 0.0.0.0/0 10.0.2.0/24 Internet Gateway Internet Load Balancer ADB Private Endpoint Rule Stateless Source Ingress Egress No No 10.0.1.0/24 10.0.3.0/24 private:10.0.3.0/24SL RT Connection | Private Endpoint
- 44. 4444 Cloud Architect OCI Console, API Database Architect SQL Dev. Application Developer APEX Data Analyst Data Scientist OML OAD
- 45. 45 What Autonomous Database Means for DBAs 45 •Tasks Specific to the Business – Architecture, planning, data modeling – Data security and data lifecycle management – Application-related tuning – End-to-End service level management •Tactical Operations – Configuration and tuning of systems, network, storage – Database provisioning, patching – Database backups, HA, disaster recovery – Database optimization Value Scale Innovation Maintenance
- 46. 4646 What Autonomous Database Means for DBAs •Tasks Specific to the Business – Architecture, planning, data modeling – Data security and data lifecycle management – Application-related tuning – End-to-End service level management •Tactical Operations – Configuration and tuning of systems, network, storage – Database provisioning, patching – Database backups, HA, disaster recovery – Database optimization Value Scale Innovation Maintenance
- 47. 47 Free Tier Always Free Services you can use for an unlimited time Free Trial $300 free credit for 30 days + 2x DBs 20 GB Storage 2x VMs 1 GB Memory 100 GB Block 10 GB Object 10 GB Archive 10 Mbps LB 10 TB Outbound 1M Notifications 1K Emails oracle.com/cloud/free
- 50. 50 Rule #1: If you love your Database Administrator Then get him an Autonomous Database!
- 51. 51 Autonomous Database Makes DBA’s Life Easy DBA
- 52. 52 Thank you Sinan Petrus Toma Senior Solution Engineer Oracle Database & Cloud Architect