A. Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement

B. Instances cannot access services outside their compartment

C. VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement

D. By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement