Enable Diagnostics & Management for Autonomous AI Databases

The Autonomous AI Databases in the compartment are listed on the Managed databases page.

1. Specify the following details to select a database:
   1. Database type: Select Autonomous AI Database.
   2. Workload type: Select the Autonomous AI Database workload type.
   3. Deployment type: Select the Autonomous AI Database deployment type: Autonomous AI Serverless, Autonomous AI Dedicated, or Autonomous AI Cloud@Customer.
   4. Autonomous AI Database: Select the Autonomous AI Database compartment, and then select the Autonomous AI Database.
   5. Service name: The predefined connection profiles for the Autonomous AI Database are automatically displayed in the dbname_<service name> (TLS or Mutual TLS) format. The default selection is displayed in the Service name field, however, you can select another option, if required. Note that if Mutual TLS is appended to the service name, then the Database wallet secret field is displayed and you will have to upload the wallet.
   6. Protocol: The TCP or TCPS protocol used to connect to the Autonomous AI Database is displayed based on the previously selected predefined service name and cannot be edited.
   7. Port: The port number is displayed based on the previously selected predefined service name and cannot be edited.
   8. Database wallet secret: Select the secret that contains the wallet from the drop-down list. This field is only displayed if Mutual TLS is appended to the service name. If an existing secret that contains the wallet is not available, then click Create new secret... and either automatically download the cwallet.sso file to add it to a secret or manually upload it to a secret. For information on database wallets and how to create a secret in the Oracle Cloud Infrastructure Vault service, see Autonomous AI Database-related Prerequisite Tasks.

      Note that a resource principal policy is required to grant Managed Database resources the permission to access the secret that contains the database wallet. If the policy is not created, then A policy is required... message is displayed and you can click Add policy to view and automatically add it. The Oracle Cloud Infrastructure IAM service creates the policy and it's added to a collection of policies called DBMgmt_Resource_Policy in the IAM service.

      For information on:

      • Vault service permissions, see Permissions Required to Enable Diagnostics & Management for Autonomous AI Databases.
      • IAM policies, see Managing Policies.
2. Specify the database credentials for the connection to the selected Autonomous AI Database.
   1. Database user name: Enter the database user name.
   2. Database user password secret: Select the secret that contains the database user password from the drop-down list. If the compartment in which the secret resides is different from the compartment displayed, then select another compartment.

      If an existing secret with the database user password is not available, then click Create new secret.... The Create password secret panel is displayed and you can create a new secret. For information on database monitoring user credentials and how to save the database user password as a secret in the Vault service, see Autonomous AI Database-related Prerequisite Tasks.

      Note that a resource principal policy is required to grant Managed Database resources the permission to access the secret that contains the database user password. If the policy is not created, then A policy is required... message is displayed and you can click Add policy to view and automatically add it. The IAM service creates the policy and it's added to a collection of policies called DBMgmt_Resource_Policy in the IAM service.

      For information on:

      • Vault service permissions required to use existing secrets or create new secrets, see Permissions Required to Enable Diagnostics & Management for Autonomous AI Databases.
      • IAM policies, see Managing Policies.
3. Select one of the following connection modes:
   Note
   
   If enabling Diagnostics & Management for Autonomous AI Database on ExaDB-C@C, only the Management Agent connection mode option is available.
   • Private Endpoint: Select this option and then the private endpoint in the Private endpoint drop-down list, which will act as a representation of Database Management in the VCN in which the Autonomous AI Database can be accessed. If the compartment in which the private endpoint resides is different from the compartment displayed, then select another compartment.

     You must ensure that the appropriate Database Management private endpoint is available. Here are the two types of Database Management private endpoints:

     • Private endpoint for Autonomous AI Databases Serverless
     • Private endpoint for Autonomous AI Databases on Dedicated Exadata Infrastructure

     If an existing Database Management private endpoint is not available, then you must create one. For information on how to create a private endpoint, see Create a Database Management Private Endpoint for Autonomous AI Databases.

     Note
     
     The Private endpoint information section in the Enable Diagnostics & Management panel is not displayed if the Secure access from everywhere option is used to configure network access to an Autonomous AI Database Serverless.

     If ingress and egress security rules were not added to an NSG or a Security List as part of the prerequisite tasks, click Add network security rule.

     The security rules are required to enable communication between Database Management and the Autonomous AI Database. For information on the required Oracle Cloud Infrastructure Networking service permissions, see Permissions Required to Enable Diagnostics & Management for Autonomous AI Databases.

     In the Add network security rule panel:

     1. Select either Security list or Network security group depending on which security feature you want to use to add security rules.

        Note that the Network security group radio button is only displayed if the Database Management private endpoint and the Autonomous AI Database have an attached NSG. For an Autonomous AI Database that has an Access Control List (ACL) defined, the Network security group radio button is displayed if the Database Management private endpoint has an attached NSG.

     2. Select one of the following options in the Ingress rule section and review the details of the ingress rule that will be created:
        • If you've selected the Security list option, select a security list in the Autonomous AI Database's subnet.
        • If you've selected the Network security group option, select an NSG attached to the Autonomous AI Database.
        Note
        
        For an Autonomous AI Database that has an ACL defined, the Ingress rule section is not displayed as the database automatically accepts connections from addresses on the list and rejects all other client connections.
     3. Select one of the following options in the Egress rule section and review the details of the egress rule that will be created:
        • If you've selected the Security list option, select a security list in the private endpoint's subnet.
        • If you've selected the Network security group option, select an NSG attached to the private endpoint.
     4. Click Submit.

     For general information on how to enable communication using security rules, see Enable Communication Between Database Management and Oracle Cloud Databases.

   • Management agent: Select the Management Agent in the Management agent drop-down list. If the compartment in which the Management Agent resides is different from the compartment displayed, then select another compartment.

     If a Management Agent is not installed, then you must first install one. For information, see Install Management Agents.

     Note that a resource principal policy is required to grant the agent the permission to access the secret that contains the database wallet. If the policy is not created, then A policy is required... message is displayed and you can click Add policy to view and automatically add it. The IAM service creates the policy and it's added to a collection of policies called DBMgmt_Resource_Policy in the IAM service.

4. Click Enable Diagnostics & Management.