Lab/Workshop: Zero Trust Packet Routing: Protection for your resources
URL: https://livelabs.oracle.com/ords/r/dbpm/livelabs/run-workshop-livelabs?p200_id=219885&clear=200&session=105427450976323&cs=11svP9IeBTcAcBJydLuUJOJFVdLz6zbl2A1HSvaAMQ5Au5wrr5Hh3dujDZMGQhjSCZgxki18iKzDdXuBbCwZNHg
I am working in an OCI LiveLabs environment where access is restricted to:
- A specific compartment
- The Hyderabad region
- A limited set of OCI services and IAM permissions
Within the assigned compartment and region, I was able to create resources such as Compute instances and databases successfully.
However, the lab requires creating Zero Trust Packet Routing (ZPR) security attribute namespaces and attributes. Before creating these resources, ZPR must first be enabled at the tenancy level.
When I attempt to enable ZPR, the OCI Console displays the following error:
Authorization failed or requested resource not found.
Based on the OCI documentation and console behavior, ZPR can be enabled only from the tenancy’s home region. The LiveLabs tenancy provides access only to the Hyderabad region, while the tenancy home region is not available to lab participants. In addition, our permissions appear to be limited to the assigned compartment, whereas enabling ZPR requires tenancy-level permissions.
Because of these restrictions, I cannot complete the following lab steps:
- Enable ZPR for the tenancy
- Create a ZPR security attribute namespace
- Create security attributes
- Apply the attributes to the lab resources
Could the LiveLabs team please confirm whether:
- ZPR is expected to be pre-enabled in the lab tenancy;
- additional tenancy-level permissions are required;
- the lab must be provisioned in the tenancy home region; or
- these ZPR steps should be skipped in the current lab environment?
Environment details:
-
Lab region: India South — Hyderabad
-
Access scope: Assigned compartment only
-
Error: Authorization failed or requested resource not found
-
Other services tested successfully: Compute and Autonomous Database
