allow any-user
to { BUCKET_INSPECT, BUCKET_READ, OBJECT_INSPECT, OBJECT_READ,
OBJECT_OVERWRITE, OBJECT_CREATE, OBJECT_DELETE }
in tenancy
where all {
request.principal.type = 'fawbeyondpublish',
target.compartment.id = request.principal.compartment.id,
target.bucket.name='BUCKET_NAME_CREATED_BY_CUSTOMER'
}
Note:
The only element of this policy that you should modify is to replace
'YOUR_TARGET_BUCKET_NAME' with the name of your bucket created in step 1. Don't change any other elements in the policy.
You can use the same bucket for Delta, Iceberg, and Change Data format, but if you have three separate buckets (one for Delta format, second for Iceberg format, and a third for Change Data, duplicate the above policy, one per bucket name. Don't modify any parts of the policies other than the unique bucket names.
See Managing Policies for more information.