nerdexam
Oracle

1Z0-1067 · Question #64

You have been tasked with allocating an identity to one of your compute instances that needs to retrieve and process static files that are stored in an Object Storage bucket. After creating a…

The correct answer is A. Create IAM policies to permit users in these groups to make API calls against Oracle Cloud. Dynamic groups allow you to group Oracle Cloud Infrastructure computer instances as "principal" actors (similar to user groups). You can then create policies to permit instances to make API calls against Oracle Cloud Infrastructure services. When you create a dynamic group…

Implement OCI Tagging and Governance

Question

You have been tasked with allocating an identity to one of your compute instances that needs to retrieve and process static files that are stored in an Object Storage bucket. After creating a dynamic group with a matching rule that specifies the OCID of the compute instance, you discover the that API calls are failing. Which step should you take to resolve this issue?

Options

  • ACreate IAM policies to permit users in these groups to make API calls against Oracle Cloud
  • BInitial credentials must be initialized using OCI console for the Instance in dynamic group. This can be
  • CCreate IAM policies to permit instances in these groups to make API calls against Oracle Cloud
  • DOnce instances are in dynamic group no additional steps are required.

How the community answered

(20 responses)
  • A
    80% (16)
  • B
    5% (1)
  • C
    10% (2)
  • D
    5% (1)

Explanation

Dynamic groups allow you to group Oracle Cloud Infrastructure computer instances as "principal" actors (similar to user groups). You can then create policies to permit instances to make API calls against Oracle Cloud Infrastructure services. When you create a dynamic group, rather than adding members explicitly to the group, you instead define a set of matching rules to define the group members.

Topics

#dynamic groups#IAM policies#instance principal#API authentication

Community Discussion

No community discussion yet for this question.

Full 1Z0-1067 Practice