An Ops Insights EM Bridge is required to move data from the OCI Object Storage bucket to Ops Insights for analysis. Before setting up the EM Bridge, you need to create Identity and Access Management (IAM) policies in order to read from the configured Object Storage Bucket. Create a dynamic group and provide permissions for the dynamic group to access the data in the above Object Storage compartment. Additionally, add policies to use the opsi-enterprise-manager-bridge resource, which is part of opsi-family aggregate resource-type. The following examples illustrate the policy creation process.

• Example rule for bridge dynamic group where the resource can be in any compartment in tenancy:

  ALL {resource.type='opsienterprisemanagerbridge'}

• Example rule for bridge dynamic group with specific resource compartment OCID:

  ALL {resource.type='opsienterprisemanagerbridge', resource.compartment.id = <opsienterprisemanagerbridge_resource_compartment_OCID>}

• Example policy to allow the dynamic group READ access to the Object Storage bucket:

  Allow dynamic-group <group_name> to read object-family in compartment <bucket_compartment_name> where ANY{target.bucket.name=<embridge-bucket>}