ORDS 22.1 enabling and protecting instance api?

Paavo

Hi,

how to enable instance api and create a secure system adm role user for it?

java version "17.0.3" 2022-04-19 LTS
ords.installed_version 22.1.0.r1051723

It looks like there isn't instance.api.enabled key?

$ /mypath/22.1.0/bin/ords --config /mypath/221 config info instance.api.enabled

ORDS: Release 22.1 Production on Mon May 02 16:39:25 2022

Copyright (c) 2010, 2022, Oracle.

Configuration:
 /mypath/221/


Setting information from configuration /mypath/221/databases/default

  Setting: instance.api.enabled
Description: The setting named: instance.api.enabled is not known

   Value: None
  Default: None
 Sensitive: No
   Global: No

And when enabled, how to authorize access to this api?

rgrds Paavo

thatJeffSmith-Oracle

create an ords user with the appropriate roles as Kris shows here, the docs however should talk about the security model for these APIs

https://krisrice.io/2021-01-19-Instance-API/

Paavo

Thanx!

Found also this blog : https://peterobrien.blog/2021/10/11/ords-pool-usage-chart-with-apex/ it is neat because it has apex app example. In that blog he claims that the "credentials"-file based user repository is not intended for production use, so somewhat better approach is needed. Hmm :)

btw. the dba/dbactions (sdw/rest) ords stuff are awesome!

rgrds Paavo