> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/connect/connect-cloud-accounts/onboard-your-oci-account/oci-apis-ingested-by-prisma-cloud.md). # OCI APIs Ingested by Prisma Cloud The following table lists all the OCI APIs and their permissions that Prisma Cloud supports for your OCI-related assets. It is recommended that you update your existing Terraform template to support the new permissions. The new Terraform template update eliminates the need to contact OCI to request a service limit extension for the policy statements. | Service | API Name in Prisma Cloud | Permissions (New Format) | | ---------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Current as of: | April 10, 2026 | | | OCI Analytics | oci-analytics-instance |

ANALYTICS\_INSTANCE\_INSPECT

ANALYTICS\_INSTANCE\_READ

| | OCI API Management |

oci-apimanagement-apigateway

oci-apimanagement-apigateway-deployment

|

API\_GATEWAY\_LIST

API\_GATEWAY\_READ

API\_DEPLOYMENT\_LIST

API\_DEPLOYMENT\_READ

| | OCI Bastion | oci-bastion |

BASTION\_INSPECT

BASTION\_READ

BASTION\_SESSION\_INSPECT

BASTION\_SESSION\_READ

| | OCI Big Data Service | oci-bigdataservice-instances |

BDS\_INSPECT

BDS\_READ

| | OCI Block Storage |

oci-block-storage-volume

oci-block-storage-volume-backup

oci-block-storage-volume-group

oci-block-storage-boot-volume

oci-block-storage-boot-volume-attachment

|

VOLUME\_BACKUP\_INSPECT

VOLUME\_BACKUP\_READ

VOLUME\_INSPECT

BACKUP\_POLICY\_ASSIGNMENT\_INSPECT

VOLUME\_GROUP\_INSPECT

COMPARTMENT\_INSPECT

VOLUME\_INSPECT

VOLUME\_ATTACHMENT\_INSPECT

VOLUME\_ATTACHMENT\_READ

| | OCI Block Storage | oci-block-storage-volume-attachment |

VOLUME\_ATTACHMENT\_INSPECT

VOLUME\_ATTACHMENT\_READ

| | OCI Budgets | oci-budgets-budget |

USAGE\_BUDGET\_INSPECT

USAGE\_BUDGET\_READ

| | OCI Certificate |

oci-certificate-certificateauthorities

oci-certificate-certificates

|

CERTIFICATE\_AUTHORITY\_INSPECT

CERTIFICATE\_AUTHORITY\_READ

CERTIFICATE\_INSPECT

CERTIFICATE\_READ

| | OCI Cloud Guard |

oci-cloudguard-security-recipe

oci-cloudguard-security-zone

oci-cloudguard-detector-recipe

oci-cloudguard-configuration

|

SECURITY\_RECIPE\_INSPECT

SECURITY\_RECIPE\_READ

SECURITY\_ZONE\_INSPECT

SECURITY\_ZONE\_READ

CG\_DETECTOR\_RECIPE\_INSPECT

CG\_DETECTOR\_RECIPE\_READ

CG\_TARGET\_INSPECT

CG\_TARGET\_READ

CG\_CONFIG\_INSPECT

CG\_CONFIG\_READ

| | OCI Compute |

oci-compute-instance

oci-compute-boot-volume-backup

oci-compute-image

oci-compute-vnicattachments

oci-compute-vnics

|

INSTANCE\_INSPECT

INSTANCE\_READ

BOOT\_VOLUME\_BACKUP\_INSPECT

BOOT\_VOLUME\_BACKUP\_READ

INSTANCE\_IMAGE\_INSPECT

INSTANCE\_IMAGE\_READ

VNIC\_ATTACHMENT\_READ

VNIC\_READ

| | OCI Containers And Artifacts |

oci-containers-artifacts-kubernetes-cluster

oci-containers-artifacts-kubernetes-cluster-nodepool

oci-containers-artifacts-containerimages

oci-containers-artifacts-containerrepo

|

CLUSTER\_INSPECT

CLUSTER\_NODE\_POOL\_INSPECT

CLUSTER\_NODE\_POOL\_READ

CLUSTER\_READ

REPOSITORY\_INSPECT

REPOSITORY\_READ

| | OCI Data Catalog | oci-datacatalog-catalogs |

CATALOG\_INSPECT

CATALOG\_READ

| | OCI Data Flow |

oci-dataflow-applications

This API is not supported in ap-hyderabad-1 region.

|

DATAFLOW\_APPLICATION\_INSPECT

DATAFLOW\_APPLICATION\_READ

| | OCI Data Integration | oci-dataintegration-workspaces |

DIS\_WORKSPACE\_INSPECT

DIS\_WORKSPACE\_READ

| | OCI Data Safe |

oci-data-safe-private-endpoint

oci-data-safe-target-database

|

DATA\_SAFE\_PRIVATE\_ENDPOINT\_INSPECT

DATA\_SAFE\_PRIVATE\_ENDPOINT\_READ

DATA\_SAFE\_TARGET\_DATABASE\_READ

DATA\_SAFE\_TARGET\_DATABASE\_INSPECT

| | OCI Data Safe | oci-data-safe-configuration | DATA\_SAFE\_READ | | OCI Data Science | oci-datascience-projects |

DATA\_SCIENCE\_PROJECT\_INSPECT

DATA\_SCIENCE\_PROJECT\_READ

| | OCI Database |

oci-database-autonomous-database

oci-oracledatabase-bmvm-dbsystem

oci-oracledatabase-databases

oci-database-db-home

oci-database-db-home-patch

oci-database-db-system-patch

oci-database-db-node

oci-database-keystore

|

AUTONOMOUS\_DATABASE\_INSPECT

DB\_HOME\_INSPECT

DB\_SYSTEM\_INSPECT

DATABASE\_INSPECT

DB\_NODE\_INSPECT

DB\_NODE\_QUERY

KEY\_STORE\_INPSECT

| | OCI DataLabeling | oci-datalabeling-dataset |

DATA\_LABELING\_DATASET\_INSPECT

DATA\_LABELING\_DATASET\_READ

| | OCI Events | oci-events-rule |

EVENTRULE\_LIST

EVENTRULE\_READ

| | OCI File Storage |

oci-file-storage-file-system

oci-file-storage-export

oci-file-storage-mount-target

|

FILE\_SYSTEM\_INSPECT

FILE\_SYSTEM\_READ

EXPORT\_SET\_INSPECT

EXPORT\_SET\_READ

COMPARTMENT\_INSPECT

MOUNT\_TARGET\_INSPECT

MOUNT\_TARGET\_READ

| | OCI Functions |

oci-functions-applications

oci-functions

|

FN\_APP\_LIST

FN\_APP\_READ

FN\_FUNCTION\_LIST

FN\_FUNCTION\_READ

| | OCI IAM |

oci-iam-user

oci-iam-group

oci-iam-policy

oci-iam-authentication-policy

oci-iam-identityproviders

oci-iam-dynamic-group

oci-iam-compartment



oci-iam-tag-default

|

USER\_INSPECT

USER\_READ

GROUP\_INSPECT

POLICY\_READ

AUTHENTICATION\_POLICY\_INSPECT

IDENTITY\_PROVIDER\_INSPECT

DYNAMIC\_GROUP\_INSPECT

COMPARTMENT\_INSPECT

TAG\_DEFAULT\_INSPECT

| | OCI Integration | oci-integration-instance |

INTEGRATION\_INSTANCE\_INSPECT

INTEGRATION\_INSTANCE\_READ

| | OCI JMS | oci-jms-fleet |

FLEET\_INSPECT

FLEET\_READ

| | OCI Logging | oci-logging-logs |

LOG\_GROUP\_INSPECT

LOG\_GROUP\_READ

| | OCI MySQL | oci-mysql-dbsystems |

MYSQL\_INSTANCE\_INSPECT

MYSQL\_INSTANCE\_READ

| | OCI Networking |

oci-networking-vcn

oci-networking-nsg

oci-networking-security-list

oci-networking-loadbalancer

oci-networking-routetable

oci-networking-internetgateway

oci-networking-drgattachment

oci-networking-drg

oci-networking-localpeeringgateway

oci-networking-natgateway

oci-networking-servicegateway

oci-networking-dns-zone

oci-networking-dns-tsigkeys

oci-networking-subnet

oci-networking-ipsec-connection

oci-networking-networkloadbalancer

oci-networking-private-ip

oci-networking-public-ip

|

VCN\_READ

NETWORK\_SECURITY\_GROUP\_INSPECT

NETWORK\_SECURITY\_GROUP\_READ

SECURITY\_LIST\_READ

LOAD\_BALANCER\_INSPECT

ROUTE\_TABLE\_READ

SUBNET\_READ

INTERNET\_GATEWAY\_READ

DRG\_ATTACHMENT\_READ

DRG\_READ

LOCAL\_PEERING\_GATEWAY\_READ

NAT\_GATEWAY\_READ

SERVICE\_GATEWAY\_READ

DNS\_ZONE\_INSPECT

DNS\_TSIG\_KEY\_INSPECT

DNS\_TSIG\_KEY\_READ

IPSEC\_CONNECTION\_READ

NETWORK\_LOAD\_BALANCER\_INSPECT

NETWORK\_LOAD\_BALANCER\_READ

SUBNET\_READ

PRIVATE\_IP\_READ

PUBLIC\_IP\_READ

| | OCI NoSQL Database | oci-nosql-database-table |

NOSQL\_TABLE\_INSPECT

NOSQL\_TABLE\_READ

| | OCI Notifications | oci-notifications-ons-topic |

ONS\_SUBSCRIPTION\_INSPECT

ONS\_TOPIC\_INSPECT

ONS\_TOPIC\_READ

| | OCI Object Storage | oci-object-storage-bucket |

BUCKET\_INSPECT

BUCKET\_READ

OBJECTSTORAGE\_NAMESPACE\_READ

| | OCI Object Storage | oci-object-storage-preauthenticated-requests |

BUCKET\_INSPECT

BUCKET\_READ

OBJECTSTORAGE\_NAMESPACE\_READ

| | OCI Scanning |

oci-scanning-host-scanrecipe

oci-scanning-host-scantarget

|

VSS\_HOSTSCANRECIPE\_INSPECT

VSS\_HOSTSCANRECIPE\_READ

VSS\_HOSTSCANTARGET\_INSPECT

VSS\_HOSTSCANTARGET\_READ

| | OCI Service Catalog | oci-servicecatalog-catalog |

SERVICE\_CATALOG\_INSPECT

SERVICE\_CATALOG\_READ

| | OCI Service Connector Hub | oci-serviceconnectorhub-serviceconnectors |

SERVICE\_CONNECTOR\_INSPECT

SERVICE\_CONNECTOR\_READ

| | OCI Service Mesh |

oci-service-mesh-access-policy

oci-service-mesh-meshes

oci-service-mesh-virtual-deployment

oci-service-mesh-virtualservice-routetable

oci-service-mesh-virtualservice

oci-service-mesh-ingressgateway-routetable

oci-service-mesh-ingressgateway

|

MESH\_ACCESS\_POLICY\_LIST

MESH\_ACCESS\_POLICY\_READ

SERVICE\_MESH\_LIST

SERVICE\_MESH\_READ

MESH\_VIRTUAL\_DEPLOYMENT\_LIST

MESH\_VIRTUAL\_DEPLOYMENT\_READ

MESH\_VIRTUAL\_DEPLOYMENT\_PROXY\_CONFIG\_READ

MESH\_PROXY\_DETAILS\_READ

MESH\_VIRTUAL\_SERVICE\_ROUTE\_TABLE\_LIST

MESH\_VIRTUAL\_SERVICE\_ROUTE\_TABLE\_READ

MESH\_VIRTUAL\_SERVICE\_LIST

MESH\_VIRTUAL\_SERVICE\_READ

MESH\_INGRESS\_GATEWAY\_ROUTE\_TABLE\_LIST

MESH\_INGRESS\_GATEWAY\_ROUTE\_TABLE\_READ

MESH\_INGRESS\_GATEWAY\_LIST

MESH\_INGRESS\_GATEWAY\_READ

| | OCI Speech | oci-speech-transcription-job |

AI\_SERVICE\_SPEECH\_TRANSCRIPTION\_JOB\_INSPECT

AI\_SERVICE\_SPEECH\_TRANSCRIPTION\_JOB\_READ

| | OCI Streaming |

oci-streaming-streampools

oci-streaming-streams

|

STREAM\_INSPECT

STREAM\_POOL\_INSPECT

STREAM\_POOL\_READ

STREAM\_READ

| | OCI Vaults | oci-vault-keyvault |

VAULT\_INSPECT

VAULT\_READ

| | OCI Vaults | oci-vault-secrets | SECRET\_INSPECT | | OCI Vaults | oci-vault-key |

KEY\_INSPECT

KEY\_READ

| | OCI Vaults | oci-vault-secret-versions |

SECRET\_INSPECT

SECRET\_VERSION\_INSPECT

| | OCI Vision |

oci-vision-model

oci-vision-project

|

AI\_SERVICE\_VISION\_MODEL\_INSPECT

AI\_SERVICE\_VISION\_MODEL\_READ

AI\_SERVICE\_VISION\_PROJECT\_INSPECT

AI\_SERVICE\_VISION\_PROJECT\_READ

| | OCI Web Application Firewall |

oci-waf-webappfirewallpolicy

oci-waf-networkaddresslist

oci-waf-waaspolicy

oci-waf-waasaddresslist

oci-loadbalancer-waf

|

WAF\_POLICY\_INSPECT

WAF\_POLICY\_READ

WAF\_NETWORK\_ADDRESS\_LIST\_INSPECT

WAF\_NETWORK\_ADDRESS\_LIST\_READ

WAAS\_POLICY\_INSPECT

WAAS\_POLICY\_READ

WAAS\_ADDRESS\_LIST\_INSPECT

WAAS\_ADDRESS\_LIST\_READ

WEB\_APP\_FIREWALL\_INSPECT

WEB\_APP\_FIREWALL\_READ

| --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.prismacloud.io/content-collections/connect/connect-cloud-accounts/onboard-your-oci-account/oci-apis-ingested-by-prisma-cloud.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.