Exam 1z0-997-20 topic 1 question 17 discussion

Actual exam question from Oracle's 1z0-997-20

Question #: 17
Topic #: 1

You are developing a Serverless function for your company's IoT project. This function should access Oracle Cloud Infrastructure (OCI) Object Storage to store some files. You choose Oracle Functions to deploy this function on OCI. However, your security team doesn't allow you to carry any API Token or RSA Key to authenticate the function against the OCI API to access the Object Storage.
What should you do to get this function to access OCI Object Storage without carrying any static authentication files? (Choose the best answer.)

A. Set up a Dynamic Group using the format below: Create a policy using the format below to give access to OCI Object Storage: Include a call to a "˜resource principal provider' in your function code as below:
B. Add these two policy statements for your compartment and then include a call to a "˜resource principal provider' in your function code:
C. There is no way that you can access the OCI resources from a running function.
D. Add these two policy statements for your compartment to give your function automatic access to all other OCI resources: