Agent skill · data analytics · jeremylongshore
oraclecloud-prod-checklist
Pre-production readiness checklist for OCI \u2014 backup policies, security\
Why this skill is useful
Provides specific commands and checks for validating Oracle Cloud Infrastructure environments that the AI wouldn't reliably generate on its own.
What it needs
Requires oci, python3 installed locally. About 5k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Oracle Cloud Production Checklist Overview OCI has no "Well-Architected Review" equivalent to AWS. This is the pre-production gate: a comprehensive checklist covering backup policies, security list audit, API key rotation, compartment isolation, boot volume encryption, OS Management agent, Cloud Guard, and Vulnerability Scanning. Every item is verifiable via CLI or Python SDK — no subjective assessments, only pass/fail checks. Purpose: Validate that an OCI environment meets production-grade security, resilience, and operational standards before going live. Prerequisites OCI CLI installed and configured — ~/.oci/config validated (see oraclecloud-install-auth) Python 3.8+ with the OCI SDK — pip install oci Administrator-level IAM policies — the checks require inspect and read across most service families Target compartment OCID — the compartment being audited Cloud Guard must be enabled at the tenancy level (Administration > Cloud Guard) Instructions Step 1: Compartment Isolation Audit Production workloads must be in a dedicated compartment, not the root: Pass criteria: Production compartment is NOT the root tenancy. Policies follow least-privilege (no manage all-resources in tenancy). Step 2: Backup Policy Verification Pass criteria: Every boot volume and block volume has an assigned backup policy (Bronze minimum: weekly backups, 5-week retention). Step 3: Security List and NSG Audit Pass criteria: No security list allows unrestricted ingress (0.0.0.0/0) except ports 80 and 443. Prefer NSGs over security lists for production workloads. Step 4: API Key Rotation Check Pass criteria: No API key older than 90 days. Automated rotation via OCI Vault recommended. Step 5: Boot Volume Encryption Pass criteria: All boot volumes encrypted with customer-managed keys from OCI Vault. Oracle-managed encryption is the default but does not meet most compliance frameworks (SOC 2, PCI-DSS). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/oraclecloud-prod-checklist--619331