One-OE Blueprint – One-Stack Deployment
This document provides a set of deployment options for creating a One Operating Entity (One-OE) Landing Zone on Oracle Cloud Infrastructure (OCI). Each option represents a predefined architecture pattern that combines core identity, networking, security, and monitoring components to support standardized multi-environment deployments.
The deployment menu includes several Hub architectures, each with distinct network and firewall configurations. These options enable you to choose the configuration that aligns with your security requirements, cost constraints, and workload needs.
| One-OE + Hub A | One-OE + Hub B | One-OE + Hub C | One-OE + Hub E |
|---|---|---|---|
 |
 |
 |
 |
| Main components: • Compartments, Identity Domain, IAM groups, policies • Hub A with two OCI Network Firewalls • Public Load Balancer • DRG, Route Tables • Two workload environments with dedicated Spoke VCNs • Cloud Guard, Security Zones, Vulnerability Scanning • Events, Alarms, Logging, Notifications |
Main components: • Compartments, Identity Domain, IAM groups, policies • Hub B with one OCI Network Firewall • Public Load Balancer • DRG, Route Tables • Two workload environments with dedicated Spoke VCNs • Cloud Guard, Security Zones, Vulnerability Scanning • Events, Alarms, Logging, Notifications |
Main components: • Compartments, Identity Domain, IAM groups, policies • Hub C with two Network Load Balancers • Public Load Balancer • DRG, Route Tables • Two workload environments with dedicated Spoke VCNs • Cloud Guard, Security Zones, Vulnerability Scanning • Events, Alarms, Logging, Notifications Note: configuration does not include third-party Firewalls |
Main components: • Compartments, Identity Domain, IAM groups, policies • Hub E • Public Load Balancer • DRG, Route Tables • Two workload environments with dedicated Spoke VCNs • Cloud Guard, Security Zones, Vulnerability Scanning • Events, Alarms, Logging, Notifications |
| Cost: includes the price of two OCI Network Firewalls |
Cost: includes the price of one OCI Network Firewall |
Cost: free (cost of third-party Firewalls must be accounted for separately) |
Cost: free |
| Overview and Deployment | Overview and Deployment | Overview and Deployment | Overview and Deployment |
Review the known issues for any potential problems, and feel free to contact us.
Copyright (c) 2026 Oracle and/or its affiliates.
Licensed under the Universal Permissive License (UPL), Version 1.0.
See LICENSE for more details.