Try ubuntu & data sources for the image Better security with nsgs and ingress rules? bastion? Enable VCN flow logs Integrate Vault & Object storage Check out certificates and CAs from oracle AWS Lambda to ping the cluster on a schedule