Skip to main content

💼 1.14 Ensure Instance Principal authentication is used for OCI instances, OCI Cloud Databases and OCI Functions to make API calls - Level 1 (Manual)

  • ID: /frameworks/cis-oracle-v3.1.0/01/14

Description​

OCI instances, OCI database and OCI functions can access other OCI resources either via an OCI API key associated to a user or via Instance Principal. Instance Principal authentication can be achieved by inclusion in a Dynamic Group that has an IAM policy granting it the required access or using an OCI IAM policy that has request.principal added to the where clause. Access to OCI Resources refers to making API calls to another OCI resource like Object Storage, OCI Vaults, etc.

Similar​

  • Internal
    • ID: dec-c-6048dba6

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance