Agent skill · security · jeremylongshore
oraclecloud-security-basics
Master OCI IAM policy syntax, common policy patterns, and API key management.
Why this skill is useful
Adds executable scripts for creating IAM policies in Oracle Cloud that are not documented publicly.
What it needs
Requires oci installed locally. About 5k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Oracle Cloud Security Basics Overview OCI IAM policy syntax (Allow group X to manage Y in compartment Z) is the number one enterprise complaint. One wrong policy locks you out of your own resources. One missing verb and your automation silently fails with a 404 NotAuthorizedOrNotFound that looks like a missing resource. This skill is the IAM policy cheat sheet with tested patterns for common access scenarios. Purpose: Write correct IAM policies, manage API keys securely, and understand the OCI permission model. Prerequisites OCI Python SDK — pip install oci OCI config file at ~/.oci/config with valid credentials (user, fingerprint, tenancy, region, keyfile) Tenancy administrator access (to create policies) or membership in a group with manage policies permission Python 3.8+ Instructions Step 1: Understand the Policy Verb Hierarchy OCI uses four verbs in ascending order of privilege. Each higher verb includes all lower verbs: Verb Capabilities Typical Use Case ------ ------------- ------------------ inspect List resources, get metadata only Auditors, read-only dashboards read Inspect + get full resource details/contents Monitoring tools, reporting use Read + act on existing resources (start/stop, attach) Developers, operators manage Use + create, delete, move resources Admins, automation service accounts Critical: use does NOT include create or delete. This trips up every new OCI team. Step 2: IAM Policy Syntax Every OCI policy statement follows this exact structure: Subject types: group <group-name> — IAM user group dynamic-group <dg-name> — resource principals (instances, functions) any-user — every authenticated user (use with extreme caution) Location types: tenancy — entire tenancy (root-level policy only) compartment <name> — specific compartment compartment id <ocid> — by OCID (for automation) Step 3: Common Policy Patterns Copy these tested patterns directly. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/oraclecloud-security-basics--2adb78