Skip to main content

💼 1.14 Ensure Instance Principal authentication is used for OCI instances, OCI Cloud Databases and OCI Functions to access OCI resources. - Level 1 (Manual)

  • ID: /frameworks/cis-oracle-v3.1.1/01/14

Stats​

not available

Description​

OCI instances, OCI database and OCI functions can access other OCI resources either via an OCI API key associated to a user or via Instance Principal. Instance Principal authentication can be achieved by inclusion in a Dynamic Group that has an IAM policy granting it the required access or using an OCI IAM policy that has request.principal added to the where clause. Access to OCI Resources refers to making API calls to another OCI resource like Object Storage, OCI Vaults, etc.

Similar​

  • Sections
    • /frameworks/cis-oracle-v3.1.0/01/14

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Oracle v3.1.0 → 💼 1.14 Ensure Instance Principal authentication is used for OCI instances, OCI Cloud Databases and OCI Functions to make API calls - Level 1 (Manual)no data

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Oracle v3.1.0 → 💼 1.14 Ensure Instance Principal authentication is used for OCI instances, OCI Cloud Databases and OCI Functions to make API calls - Level 1 (Manual)no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance