Policies for Object Storage

Shows how to allow Disaster Recovery (DR) to manage Object Storage buckets and objects. This access is required to:

  • Manage Object Storage buckets that are members in a DRPG.
  • Write logs to Object Storage during DR plan executions.

Policies to configure using resource principal

Allow dynamic-group <Dynamic_group_Name> to manage buckets in compartment compartment_name
Allow dynamic-group <Dynamic_group_Name> to manage objects in compartment compartment_name

Policies to configure using user authentication

Allow group group_name to manage object-family in compartment compartment_name

For additional about the Identity and Access Management (IAM) policies for Object Storage, refer Object Storage Replication.