Description

Oracle Autonomous Database Shared (ADB-S) automates database tuning, security, backups, updates, and other routine management tasks traditionally performed by DBAs. ADB-S provide ingress filtering of network traffic or can be deployed within an existing Virtual Cloud Network (VCN). It was detected that the Autonomous Database {OciAutonomousDb.Name} has an unrestricted access control rule. It is advised that all new ADB-S databases be deployed within a VCN and that the Access Control Rules be restricted to your corporate IP Addresses or VCNs for existing ADB-S databases. Restricting connectivity to ADB-S Databases reduces an ADB-S database's exposure to risk.

• 

  Recommended Mitigation

  It is recommended to edit the access control rule to be more restrictive and only allow access from authorized IPs/VCNs.