What is a recommended best practice when implementing FDI in OCI Console?

• A. Create a single compartment for all FDI instances.
• B. Put all resources in the root compartment.
• C. Create separate compartments for each FDI instance type.
• D. Use a compartment per environment only.

Answer: (C)

Compartments in OCI act as security and governance boundaries for organizing resources. When implementing FDI in the OCI Console, creating separate compartments for each FDI instance type provides clear isolation between different kinds of instances. This allows you to tailor IAM policies, budgets, and lifecycle controls to each specific type, making governance, security, and auditing more precise and straightforward. It also reduces risk, because issues or misconfigurations in one instance type don’t spill over to others, and it supports easier automation and cost reporting by type.

Putting all resources in the root compartment weakens access control and makes auditing and cost tracking unwieldy. A single compartment for all FDI instances blends different types and lifecycles, complicating policy management. A compartment per environment only helps with environment separation but still mixes instance types, which can hinder granular governance and scalable administration.