💼 1.14 Ensure Instance Principal authentication is used for OCI instances, OCI Cloud Databases and OCI Functions to make API calls - Level 1 (Manual)
- ID:
/frameworks/cis-oracle-v3.1.0/01/14
Description​
OCI instances, OCI database and OCI functions can access other OCI resources
either via an OCI API key associated to a user or via Instance Principal.
Instance Principal authentication can be achieved by inclusion in a Dynamic
Group that has an IAM policy granting it the required access or using an OCI
IAM policy that has request.principal added to the where clause. Access to OCI
Resources refers to making API calls to another OCI resource like Object
Storage, OCI Vaults, etc.
Similar​
- Internal
- ID:
dec-c-6048dba6
- ID:
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|