Prerequisites to use Toolkit
-
IAM policy to allow user/instance principal to manage the services that need to be created/exported using the toolkit.
-
Minimum requirement is to have read access to the tenancy.
Sample Policies
Allow group <cd3_group> to read all resources in tenancy
Allow group <cd3_group> to manage all-resources in tenancy where any {target.resource = 'instance-family', target.resource = 'object-family', target.resource = 'volume-family', target.resource = 'virtual-network-family', target.resource = 'database-family' ,target.resource = 'dns',target.resource = 'file-family'}