Resource Identifiers
This topic describes the different ways your Oracle Cloud Infrastructure resources are identified.
Oracle Cloud IDs (OCIDs)
Most types of Oracle Cloud Infrastructure resources have an Oracle-assigned unique ID called anOracle Cloud Identifier (OCID). It's included as part of the resource's information in both the Console and API.
To use the API, you need the OCID for yourtenancy . For information about where to find it, see the next section.
OCIDs use this syntax:
ocid1.<RESOURCE TYPE>.<REALM>.[REGION][.FUTURE USE].<UNIQUE ID>- ocid1: The literal string indicating the version of the OCID.
- resource type: The type of resource (for example,
instance,volume,vcn,subnet,user,group, and so on). - realm: The realm the resource is in. Arealmis a set of regions that share entities. Possible values are
oc1for thecommercial realm,oc2for theGovernment Cloud realm, oroc3for theFederal Government Cloud realm. The regions in the commercial realm (OC1) belong to the domainoraclecloud.com. The regions in the Government Cloud (OC2) belong to the domainoraclegovcloud.com. - region: The region the resource is in (for example,
phx,iad,eu-frankfurt-1). With the introduction of the Frankfurt region, the format switched from a three-character code to a longer string. This part is present in the OCID only for regional resources or those specific to a single availability domain. If the region is not applicable to the resource, this part might be blank (see the example tenancy ID below). - future use: Reserved for future use. Currently blank.
- unique ID: The unique portion of the ID. The format may vary depending on the type of resource or service.
Example OCIDs
Tenancy:
ocid1.tenancy.oc1..aaaaaaaaba3pv6wkcr4jqae5f44n2b2m2yt2j6rx32uzr4h25vqstifsfdsqInstance:
ocid1.instance.oc1.phx.abuw4ljrlsfiqw6vzzxb43vyypt4pkodawglp3wqxjqofakrwvou52gb6s5aWhere to Find Your Tenancy's OCID
If you use the Oracle Cloud Infrastructure API, you need your tenancy's OCID in order to sign the API requests. You also use the tenancy ID in some of the IAM API operations.
Get the tenancy OCID from the Oracle Cloud Console on theTenancy Details page:
In the navigation bar, select theProfile menu
and then selectTenancy:<your_tenancy_name>.The tenancy OCID is shown underTenancy Information. SelectShow to display the entire ID or selectCopy to copy it to your clipboard.
The tenancy OCID looks something like this (notice the word "tenancy" in it):
ocid1.tenancy.oc1..<unique_ID>Name and Description
The IAM service requires you to assign a unique, unchangeablenameto each of your IAM resources (users, groups, dynamic groups, federations, and policies). The name must be unique within the scope of the type of resource (for example, you can only have one user with the name BobSmith). Notice that this requirement is specific to IAM, but also applies to some other services. (Most services let you assign an optional display name.)
The name you assign to a user at creation is their login for the Console.
You can use these names instead of the OCID when writing a policy (for example,Allow group <GROUP NAME> to manage all-resources in compartment <COMPARTMENT NAME>).
In addition to the name, you must also assign adescriptionto each of your IAM resources (although it can be an empty string). It can be a friendly description or other information that helps you easily identify the resource. The description does not have to be unique, and you can change it whenever you like. For example, you might want to use the description to store the user's email address if you're not already using the email address as the user's unique name.
Display Name
For most of the Oracle Cloud Infrastructure resources you create (other than those in IAM and other services that require resources to have a unique, unchangeable name and a description), you can optionally assign adisplay name. It can be a friendly description or other information that helps you easily identify the resource. The display name does not have to be unique, and you can change it whenever you like. The Console shows the resource's display name along with its OCID.
Avoid entering confidential information when assigning descriptions, tags, or friendly names to cloud resources through the Oracle Cloud InfrastructureConsole, API, or CLI.