Oracle Exam 1Z0-1084-22 Topic 1 Question 21 Discussion

Authorization Header

The Oracle Cloud Infrastructure signature uses the 'Signature' Authentication scheme (with anAuthorizationheader), and not the Signature HTTP header.

This section describes the headers that must be included in the signing string:

For GETand DELETE requests (when there's no content in the request body), the signing string must include at least these headers:

(request-target)

host

dateorx-date(if both are included, Oracle usesx-date)

For PUTand POST requests (when there's content in the request body), the signing string must include at least these headers:

(request-target)

host

dateorx-date(if both are included, Oracle usesx-date)

x-content-sha256(except for Object Storage PUT requests; see the next section)

content-type

content-length

References:

https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm