target.bucket.name pattern matching rejected by IAM policy parser — documentation gap confirmed
Summary:
target.bucket.name pattern matching rejected by IAM policy parser despite being documented — single quotes required but undocumented
Content (please ensure you mask any confidential information):
The official OCI documentation lists target.bucket.name as supporting String and Patterns for both buckets and objects, with this published example:
where target.bucket.name=/ProjectA_*/
Reference:
This syntax is rejected at save time by the IAM policy parser. Same policy with exact bucket name saves without issues.
After escalation to Oracle Engineering, confirmed working syntax for prefix match:
where target.bucket.name = '/bkt-prefix-p*/'
Single quotes around the pattern are
0