You want an OCI compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file. What do you need to do?
1) Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement
2) Instances cannot access services outside their compartment
3) VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement
4) By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement