A civic Oracle Function only needs to fetch a Vault secret bundle at invoke time. Which IAM verb and target best match least privilege?
Select an answer to reveal the explanation.
Short Explanation
IAM verbs climb like building-access badges: inspect, read, use, manage. Fetching a password is a read badge, not a master key to the whole tenancy.
Full Explanation
OCI IAM verbs stack as inspect < read < use < manage. A Function that only retrieves a secret needs read on secret-family or secret-bundles for the appropriate scope. Granting manage all-resources in the tenancy violates least privilege, which is the cloud-native security measure this scenario tests.