Need to enhance OCI Network Sources to apply globally to CLI access
Organization Name (Required - If you are an Oracle Partner, please provide the organization you are logging the idea on behalf of):
Berkshire Hathaway Energy
Description (Required):
Need to enhance OCI Network Sources to apply globally to CLI access to avoid having to apply to all policy statements. Current approach requires 100s of potentially error-prone network source restrictions changes. Please note that current configuration was exploited during a penetration test to gain admin access to our tenant with the use of a compromised API key with CLI access. If global network restrictions in place within the tenant were enforced on the CLI, the attack would be more difficult to mount and easier to detect.