IAM - Oracle Cloud Infrastructure - Architect Associate(1Z0-1072-20)

 Oracle Cloud Infrastructure Architect Associate exam tests varieties of topics like

1. Identity and Access Management
2. Networking
3. Compute 
4. Storage
5. Database

A good place to learn about the topics are

https://docs.oracle.com/en-us/iaas/Content/home.htm

And there is a book specifically written for the exam and is available in Oreilly

https://learning.oreilly.com/library/view/oracle-cloud-infrastructure/9781260452600

In this blog, I am sharing the notes I have taken for the topic 

Identity and Access Management (IAM)

Tenancy - cloud account

compartment - logical collection of related resources

Groups - May be created with a collection of users

As new users are signed up for OCI, the cloud administrator should make use of IAM policies to grant appropriate access to Groups and then create Users

• For any resource, access is given only to a group and not to any individual user
• IAM Policy - is applied for a group
• Verbs
• inspect
• read
• use
• manage
• Regional Subscription is at tenancy level
• Global Resource
• IAM
• Keys, Key Vault
• DNS
• Availability Domain
• Subnet
• Compute Instance
• Block Volume
• DB System
• File System (& Mount target)
• Ephemeral IP
• Regional 
• Everything else