IAM

Question 1

What is a Resource

Answer 1

Is a cloud object that you create and use in OCI (e.g. compute instances, block storage volumes, Virtual Clou Networks). Each resource has a unique Oracle Cloud ID (OCID)

Question 2

What is a Principal

Answer 2

A principal is an IAM entity that is allowed to interact with OCI resources.
Principals can be IAM users and Instance Principals

Question 3

IAM Service authenticate a principal by what?

Answer 3

Username, password
API Signing key
Auth Tokens (oracle generated token strings to authenticate 3rd party APIs)

Question 4

What are Policies

Answer 4

Policies are comprised of one or more statements which specify what groups can access what resources ad at what level.

Question 5

What is the Policy format?

Answer 5

Allow group to in tenancy

Allow group to in compartment where

Question 6

What are the verbs that can be used for Policies?

Answer 6

Inspect - List resources
read - Includes inspect + ability to get user-specified metadata
use - Includes read+ability to work with existing resources
manage - includes all permisions for the resources

Question 7

What is a Tag Namespace?

Answer 7

A Tag Namespace is a container for sets of tag keys with tag definition