Control: 1.13 Ensure Dynamic Groups are used for OCI instances, OCI Cloud Databases and OCI Function to access OCI resources

Description

OCI instances, OCI database and OCI functions can access other OCI resources either via an OCI API key associated to a user or by being including in a Dynamic Group that has an IAM policy granting it the required access. Access to OCI Resources refers to making API calls to another OCI resource like Object Storage, OCI Vaults, etc.

Remediation

From Console

1. Login to OCI Console.
2. Select Identity from Services menu.
3. Select Dynamic Groups from Identity menu.
4. Click Create Dynamic Groups.
5. Enter a Name.
6. Enter a Description.
7. Enter Matching Rules to that includes the instances accessing your OCI resources.
8. Click Create.