oracle-ads 2.13.12__py3-none-any.whl → 2.13.13__py3-none-any.whl

ads/aqua/verify_policies/constants.py

@@ -0,0 +1,13 @@
+OBS_MANAGE_TEST_FILE = "AQUA Policy Verification - OBJECT STORAGE"
+TEST_MODEL_NAME="AQUA Policy Verification -  Model"
+TEST_MD_NAME="AQUA Policy Verification - Model Deployment"
+TEST_JOB_NAME="AQUA Policy Verification - Job"
+TEST_JOB_RUN_NAME="AQUA Policy Verification - Job Run"
+TEST_MVS_NAME="AQUA Policy Verification - Model Version Set"
+TEST_VM_SHAPE="VM.Standard.E4.Flex"
+TEST_DEFAULT_JOB_SHAPE = "VM.Standard.E3.Flex"
+TEST_LIMIT_NAME = "ds-gpu-a10-count"
+DUMMY_TEST_BYTE = b"7IV6cktUGcHIhur4bXTv"
+POLICY_HELP_LINK = "https://github.com/oracle-samples/oci-data-science-ai-samples/blob/main/ai-quick-actions/policies/README.md"
+
+

ads/aqua/verify_policies/entities.py

@@ -0,0 +1,29 @@
+from dataclasses import dataclass
+from ads.common.extended_enum import ExtendedEnum
+from ads.common.serializer import DataClassSerializable
+
+
+class PolicyStatus(ExtendedEnum):
+    SUCCESS = "SUCCESS"
+    FAILURE = "FAILURE"
+    UNVERIFIED = "UNVERIFIED"
+
+
+@dataclass(repr=False)
+class OperationResultSuccess(DataClassSerializable):
+    operation: str
+    status: PolicyStatus = PolicyStatus.SUCCESS
+
+
+@dataclass(repr=False)
+class OperationResultFailure(DataClassSerializable):
+    operation: str
+    error: str
+    policy_hint: str
+    status: PolicyStatus = PolicyStatus.FAILURE
+
+
+@dataclass(repr=False)
+class CommonSettings(DataClassSerializable):
+    compartment_id: str
+    project_id: str

ads/aqua/verify_policies/messages.py

@@ -0,0 +1,101 @@
+from ads.aqua.verify_policies.utils import VerifyPoliciesUtils
+
+utils = VerifyPoliciesUtils()
+operation_messages = {
+    utils.list_compartments.__name__: {
+        "name": "List Compartments",
+        "error": "Unable to retrieve the list of compartments. Please verify that you have the required permissions to list compartments in your tenancy. ",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to inspect compartments in tenancy"
+    },
+    utils.list_models.__name__: {
+        "name": "List Models",
+        "error": "Failed to fetch available models. Ensure that the policies allow you to list models from the Model Catalog in the selected compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-models in compartment <your-compartment-name>"
+    },
+    utils.list_project.__name__: {
+        "name": "List Projects",
+        "error": "Failed to list Data Science projects. Verify that you have the appropriate permission to access projects in the selected compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-projects in compartment <your-compartment-name>"
+    },
+    utils.list_model_version_sets.__name__: {
+        "name": "List Model Version Sets",
+        "error": "Unable to load model version sets. Check your access rights to list model version sets in the selected compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-modelversionsets in compartment <your-compartment-name>"
+    },
+    utils.list_jobs.__name__: {
+        "name": "List Jobs",
+        "error": "Job list could not be retrieved. Please confirm that you have the necessary permissions to view jobs in the compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-jobs in compartment <your-compartment-name>"
+    },
+    utils.list_job_runs.__name__: {
+        "name": "List Job Runs",
+        "error": "Job Runs list could not be retrieved. Please confirm that you have the necessary permissions to view job runs in the compartme",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-job-runs in compartment <your-compartment-name>"
+    },
+    utils.list_buckets.__name__: {
+        "name": "List Object Storage Buckets",
+        "error": "Cannot fetch Object Storage buckets. Verify that you have access to list buckets within the specified compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to read objectstorage-namespaces in compartment <your-compartment-name>\nAllow dynamic-group aqua-dynamic-group to read buckets in compartment <your-compartment-name>"
+    },
+    utils.manage_bucket.__name__: {
+        "name": "Object Storage Access",
+        "error": "Failed to access the Object Storage bucket. Verify that the bucket exists and you have write permissions.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage object-family in compartment <your-compartment-name> where any {target.bucket.name='<your-bucket-name>'}"
+    },
+    utils.list_log_groups.__name__: {
+        "name": "List Log Groups",
+        "error": "Log groups or logs could not be retrieved. Please confirm you have logging read access for the selected compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to use logging-family in compartment <your-compartment-name>"
+    },
+    utils.get_resource_availability.__name__: {
+        "name": "Verify Shape Limits",
+        "error": "Failed to retrieve shape limits for your compartment. Make sure the required policies are in place to read shape and quota data.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to read resource-availability in compartment <your-compartment-name>"
+    },
+    utils.register_model.__name__: {
+        "name": "Register Model",
+        "error": "Model registration failed. Ensure you have the correct permissions to write to the Model Catalog and access Object Storage.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-models in compartment <your-compartment-name>"
+    },
+    utils.aqua_model.delete_model.__name__: {
+        "name": "Delete Model",
+        "error": "Could not delete model. Please confirm you have delete permissions for Model Catalog resources in the compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-models in compartment <your-compartment-name>"
+    },
+    utils.create_job.__name__: {
+        "name": "Create Job",
+        "error": "Job could not be created. Please check if you have permissions to create Data Science jobs.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-jobs in compartment <your-compartment-name>"
+    },
+    utils.create_job_run.__name__: {
+        "name": "Create Job Run",
+        "error": "Job Run could not be created. Confirm that you are allowed to run jobs in the selected compartment.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-job-runs in compartment <your-compartment-name>"
+    },
+    "delete_job": {
+        "name": "Delete Job",
+        "error": "Job could not be deleted. Please check if you have permissions to delete Data Science jobs.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-jobs in compartment <your-compartment-name>"
+    },
+    utils.aqua_model.create_model_version_set.__name__: {
+        "name": "Create Model Version Set",
+        "error": "Unable to create a model version set for storing evaluation results. Ensure that required Model Catalog permissions are set.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-modelversionsets in compartment <your-compartment-name>"
+    },
+    utils.aqua_model.ds_client.delete_model_version_set.__name__: {
+        "name": "Delete Model Version Set",
+        "error": "Unable to delete a model version. Ensure that required Model Catalog permissions are set.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-modelversionsets in compartment <your-compartment-name>"
+    },
+    utils.create_model_deployment.__name__: {
+        "name": "Create Model Deployment",
+        "error": "Model deployment could not be created. Confirm you have correct permissions to deploy models to the Model Deployment service.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-model-deployments in compartment <your-compartment-name>"
+    },
+    utils.aqua_model.ds_client.delete_model_deployment.__name__: {
+        "name": "Delete Model Deployment",
+        "error": "Unable to delete the model deployment. Please check if you have appropriate permissions to manage deployments.",
+        "policy_hint": "Allow dynamic-group aqua-dynamic-group to manage data-science-model-deployments in compartment <your-compartment-name>"
+    }
+
+}

ads/aqua/verify_policies/utils.py

@@ -0,0 +1,432 @@
+import logging
+from ads.aqua.model.model import AquaModelApp
+from ads.aqua.verify_policies.constants import DUMMY_TEST_BYTE, OBS_MANAGE_TEST_FILE, TEST_DEFAULT_JOB_SHAPE, TEST_MD_NAME, \
+    TEST_MODEL_NAME
+from ads.aqua.verify_policies.entities import PolicyStatus
+from ads.common.auth import default_signer
+from ads.common.oci_mixin import LIFECYCLE_STOP_STATE
+from ads.config import COMPARTMENT_OCID, DATA_SCIENCE_SERVICE_NAME, TENANCY_OCID, PROJECT_OCID
+from ads.common import oci_client
+from rich.console import Console
+from rich.logging import RichHandler
+
+logger = logging.getLogger("aqua.policies")
+
+import oci
+
+class PolicyValidationError(Exception):
+    def __init__(self, error: str):
+        super().__init__(error)
+    
+class VerifyPoliciesUtils:
+    """
+    Utility class for verifying OCI IAM policies through operations on Data Science resources.
+    Provides methods to interact with models, model deployments, jobs, object storage, and limits APIs
+    using Oracle Accelerated Data Science (ADS) SDK.
+    """
+    def __init__(self):
+        self.aqua_model = AquaModelApp()
+        self.obs_client = oci_client.OCIClientFactory(**default_signer()).object_storage
+        self.model_id = None
+        self.job_id = None
+        self.limit = 3
+
+    def list_compartments(self, **kwargs):
+        """
+        List compartments in a given tenancy.
+
+        Parameters:
+            compartment_id (str, optional): OCID of the parent compartment. Defaults to TENANCY_OCID.
+            limit (int, optional): Maximum number of compartments to return. Defaults to 3.
+
+        Returns:
+            List[oci.identity.models.Compartment]: List of compartment data objects.
+        """
+        compartment_id = kwargs.pop("compartment_id", TENANCY_OCID)
+        limit = kwargs.pop("limit", self.limit)
+        return self.aqua_model.identity_client.list_compartments(compartment_id=compartment_id, limit=limit,
+                                                                 **kwargs).data
+
+    def list_models(self, **kwargs):
+        """
+        List models registered in Data Science.
+
+        Parameters:
+            **kwParameters: Filters such as display_name, lifecycle_state, etc.
+
+        Returns:
+            List[oci.data_science.models.Model]: List of model metadata.
+        """
+        return self.aqua_model.list(**kwargs)
+
+    def list_log_groups(self, **kwargs):
+        """
+        List log groups in the compartment.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            limit (int, optional): Maximum results. Defaults to 3.
+
+        Returns:
+            List[oci.logging.models.LogGroupSummary]: List of log groups.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        limit = kwargs.pop("limit", self.limit)
+        return self.aqua_model.logging_client.list_log_groups(compartment_id=compartment_id, limit=limit, **kwargs).data
+
+    def list_log(self, **kwargs):
+        """
+        List logs under a specific log group.
+
+        Parameters:
+            log_group_id (str): OCID of the log group.
+            limit (int, optional): Maximum number of logs to return. Defaults to 3.
+
+        Returns:
+            List[oci.logging.models.LogSummary]: List of log metadata.
+        """
+        log_group_id = kwargs.pop("log_group_id")
+        limit = kwargs.pop("limit", self.limit)
+        return self.aqua_model.logging_client.list_logs(log_group_id=log_group_id, limit=limit, **kwargs).data
+
+    def list_project(self, **kwargs):
+        """
+        List Data Science projects in a compartment.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            limit (int, optional): Maximum number of projects to return. Defaults to 3.
+
+        Returns:
+            List[oci.data_science.models.ProjectSummary]: List of project summaries.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        limit = kwargs.pop("limit", self.limit)
+        return self.aqua_model.ds_client.list_projects(compartment_id=compartment_id, limit=limit, **kwargs).data
+
+    def list_model_version_sets(self, **kwargs):
+        """
+        List model version sets in a compartment.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            limit (int, optional): Max results. Defaults to 3.
+
+        Returns:
+            List[oci.data_science.models.ModelVersionSetSummary]: List of version sets.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        limit = kwargs.pop("limit", self.limit)
+        return self.aqua_model.ds_client.list_model_version_sets(compartment_id=compartment_id, limit=limit,
+                                                                 **kwargs).data
+
+    def list_jobs(self, **kwargs):
+        """
+        List Data Science jobs in a compartment.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            limit (int, optional): Max results. Defaults to 3.
+
+        Returns:
+            List[oci.data_science.models.JobSummary]: List of job summaries.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        limit = kwargs.pop("limit", self.limit)
+        return self.aqua_model.ds_client.list_jobs(compartment_id=compartment_id, limit=limit, **kwargs).data
+
+    def list_job_runs(self, **kwargs):
+        """
+        List job runs in a compartment.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            limit (int, optional): Max results. Defaults to 3.
+
+        Returns:
+            List[oci.data_science.models.JobRunSummary]: List of job run records.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        limit = kwargs.pop("limit", self.limit)
+        return self.aqua_model.ds_client.list_job_runs(compartment_id=compartment_id, limit=limit, **kwargs).data
+
+    def list_buckets(self, **kwargs):
+        """
+        List Object Storage buckets in a compartment.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            limit (int, optional): Max results. Defaults to self.limit.
+
+        Returns:
+            List[oci.object_storage.models.BucketSummary]: List of buckets.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        limit = kwargs.pop("limit", self.limit)
+        namespace_name = self.obs_client.get_namespace(compartment_id=compartment_id).data
+        return self.obs_client.list_buckets(namespace_name=namespace_name, compartment_id=compartment_id, limit=limit,
+                                            **kwargs).data
+
+    def manage_bucket(self, **kwargs):
+        """
+        Verify Object Storage access by creating and deleting a test file in a bucket.
+
+        Parameters:
+            bucket (str): Name of the bucket to test access in.
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+
+        Returns:
+            bool: True if test object operations succeeded.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        namespace_name = self.obs_client.get_namespace(compartment_id=compartment_id).data
+        bucket = kwargs.pop("bucket")
+        logger.info(f"Creating file in object storage with name {OBS_MANAGE_TEST_FILE} in bucket {bucket}")
+        self.obs_client.put_object(namespace_name, bucket, object_name=OBS_MANAGE_TEST_FILE, put_object_body="TEST")
+        logger.info(f"Deleting file {OBS_MANAGE_TEST_FILE} from object storage")
+        self.obs_client.delete_object(namespace_name, bucket, object_name=OBS_MANAGE_TEST_FILE)
+        return True
+
+    def list_model_deployment_shapes(self, **kwargs):
+        """
+        List available model deployment compute shapes.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            limit (int, optional): Max results. Defaults to 3.
+
+        Returns:
+            List[oci.data_science.models.ModelDeploymentShapeSummary]: List of shapes.
+        """
+        limit = kwargs.pop("limit", self.limit)
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        return self.aqua_model.ds_client.list_model_deployment_shapes(compartment_id=compartment_id, limit=limit,
+                                                                      **kwargs).data
+
+    def get_resource_availability(self, **kwargs):
+        """
+        Get quota availability for a specific resource.
+
+        Parameters:
+            limit_name (str): Name of the limit (e.g., 'ds-gpu-a10-count').
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+
+        Returns:
+            oci.limits.models.ResourceAvailability: Quota availability information.
+        """
+        limits_client = oci_client.OCIClientFactory(**default_signer()).limits
+        limit_name = kwargs.pop("limit_name")
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        return limits_client.get_resource_availability(compartment_id=compartment_id,
+                                                       service_name=DATA_SCIENCE_SERVICE_NAME,
+                                                       limit_name=limit_name).data
+
+    def register_model(self, **kwargs):
+        """
+        Register a new model with test metadata and a dummy artifact.
+
+        Parameters:
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            project_id (str, optional): Project OCID. Defaults to PROJECT_OCID.
+
+        Returns:
+            str: OCID of the registered model.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        project_id = kwargs.pop("project_id", PROJECT_OCID)
+
+        create_model_details = oci.data_science.models.CreateModelDetails(
+            compartment_id=compartment_id,
+            project_id=project_id,
+            display_name=TEST_MODEL_NAME
+        )
+        logger.info(f"Registering test model `{TEST_MODEL_NAME}`")
+        model_id = self.aqua_model.ds_client.create_model(create_model_details=create_model_details).data.id
+        self.aqua_model.ds_client.create_model_artifact(
+            model_id=model_id,
+            model_artifact=DUMMY_TEST_BYTE
+        ).data
+        self.model_id = model_id
+        return model_id
+
+    def create_model_deployment(self, **kwargs):
+        """
+        Create and deploy a model using a predefined container image and configuration.
+
+        Parameters:
+            model_id (str): OCID of the model to deploy.
+            instance_shape (str): Compute shape to use (e.g., 'VM.Standard2.1').
+
+        Returns:
+            str: OCID of the created model deployment.
+        """
+        model_id = kwargs.pop("model_id")
+        instance_shape = kwargs.pop("instance_shape")
+        model_deployment_instance_shape_config_details = oci.data_science.models.ModelDeploymentInstanceShapeConfigDetails(
+            ocpus=1,
+            memory_in_gbs=6)
+        instance_configuration = oci.data_science.models.InstanceConfiguration(
+            instance_shape_name=instance_shape,
+            model_deployment_instance_shape_config_details=model_deployment_instance_shape_config_details
+        )
+        model_configuration_details = oci.data_science.models.ModelConfigurationDetails(
+            model_id=model_id,
+            instance_configuration=instance_configuration
+        )
+
+        model_deployment_configuration_details = oci.data_science.models.SingleModelDeploymentConfigurationDetails(
+            model_configuration_details=model_configuration_details
+        )
+        create_model_deployment_details = oci.data_science.models.CreateModelDeploymentDetails(
+            compartment_id=COMPARTMENT_OCID,
+            project_id=PROJECT_OCID,
+            display_name=TEST_MD_NAME,
+            model_deployment_configuration_details=model_deployment_configuration_details,
+        )
+        md_ocid = self.aqua_model.ds_client.create_model_deployment(
+            create_model_deployment_details=create_model_deployment_details).data.id
+        waiter_result = oci.wait_until(
+            self.aqua_model.ds_client,
+            self.aqua_model.ds_client.get_model_deployment(md_ocid),
+            evaluate_response=lambda r: self._evaluate_response(wait_message="Waiting for Model Deployment to finish",
+                                                                response=r),
+            max_interval_seconds=30,
+        )
+        logger.info("Model Deployment may result in FAILED state.")
+        return md_ocid
+
+    def _evaluate_response(self, wait_message, response):
+        logger.info(f"{wait_message}, Current state: {response.data.lifecycle_state}")
+        return getattr(response.data, 'lifecycle_state').upper() in LIFECYCLE_STOP_STATE
+
+    def create_job(self, **kwargs):
+        """
+        Create a standalone Data Science job with default config and dummy artifact.
+
+        Parameters:
+            display_name (str): Display name of the job.
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            project_id (str, optional): Project OCID. Defaults to PROJECT_OCID.
+            shape_name (str, optional): Compute shape name. Defaults to TEST_DEFAULT_JOB_SHAPE.
+            subnet_id (str, optional): Optional subnet ID.
+
+        Returns:
+            str: OCID of the created job.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        project_id = kwargs.pop("project_id", PROJECT_OCID)
+        shape_name = kwargs.pop("shape_name", TEST_DEFAULT_JOB_SHAPE)
+        display_name = kwargs.pop("display_name")
+        subnet_id = kwargs.pop("subnet_id", None)
+        job_infrastructure_type = "STANDALONE" if subnet_id is not None else "ME_STANDALONE"
+
+        response = self.aqua_model.ds_client.create_job(
+            create_job_details=oci.data_science.models.CreateJobDetails(
+                display_name=display_name,
+                project_id=project_id,
+                compartment_id=compartment_id,
+                job_configuration_details=oci.data_science.models.DefaultJobConfigurationDetails(
+                    job_type="DEFAULT",
+                    environment_variables={}),
+                job_infrastructure_configuration_details=oci.data_science.models.StandaloneJobInfrastructureConfigurationDetails(
+                    job_infrastructure_type=job_infrastructure_type,
+                    shape_name=shape_name,
+                    subnet_id=subnet_id,
+                    job_shape_config_details=oci.data_science.models.JobShapeConfigDetails(
+                        ocpus=1,
+                        memory_in_gbs=16),
+                    block_storage_size_in_gbs=50
+                )
+            )
+        )
+
+        job_id = response.data.id
+        self.aqua_model.ds_client.create_job_artifact(job_id=job_id, job_artifact=b"echo OK\n",
+                                                      content_disposition="attachment; filename=entry.sh")
+        self.job_id = job_id
+        return job_id
+
+    def create_job_run(self, **kwargs):
+        """
+        Start a job run from an existing job and wait for its completion.
+
+        Parameters:
+            job_id (str): OCID of the job to run.
+            display_name (str): Display name of the job run.
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            project_id (str, optional): Project OCID. Defaults to PROJECT_OCID.
+
+        Returns:
+            oci.data_science.models.JobRun: Job run response after completion.
+        """
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        project_id = kwargs.pop("project_id", PROJECT_OCID)
+        job_id = kwargs.pop("job_id")
+        display_name = kwargs.pop("display_name")
+        response = self.aqua_model.ds_client.create_job_run(
+            create_job_run_details=oci.data_science.models.CreateJobRunDetails(
+                project_id=project_id,
+                compartment_id=compartment_id,
+                job_id=job_id,
+                display_name=display_name
+            )
+        )
+        job_run_id = response.data.id
+
+        waiter_result = oci.wait_until(
+            self.aqua_model.ds_client,
+            self.aqua_model.ds_client.get_job_run(job_run_id),
+            evaluate_response=lambda r: self._evaluate_response(wait_message="Waiting for job run to finish",
+                                                                response=r),
+            max_interval_seconds=30,
+            max_wait_seconds=600
+        )
+        
+        job_run_status = waiter_result.data
+        if job_run_status.lifecycle_state  == "FAILED":
+            logger.warning(f"Job run failed: {job_run_status.lifecycle_details}")
+            raise PolicyValidationError("Job Run Failed")
+        return job_run_status
+
+    def create_model_version_set(self, **kwargs):
+        """
+        Create a new model version set with the specified name.
+
+        Parameters:
+            name (str): Name of the model version set.
+            compartment_id (str, optional): Compartment OCID. Defaults to COMPARTMENT_OCID.
+            project_id (str, optional): Project OCID. Defaults to PROJECT_OCID.
+
+        Returns:
+            oci.data_science.models.ModelVersionSet: Model version set creation response.
+        """
+        name = kwargs.pop("name")
+        compartment_id = kwargs.pop("compartment_id", COMPARTMENT_OCID)
+        project_id = kwargs.pop("project_id", PROJECT_OCID)
+        return self.aqua_model.create_model_version_set(model_version_set_name=name, compartment_id=compartment_id,
+                                                        project_id=project_id)
+
+
+class RichStatusLog:
+    def __init__(self):
+        self.console = Console()
+        # logger = logging.("aqua.policies")
+        handler = RichHandler(console=self.console,
+                              markup=True,
+                              rich_tracebacks=False,
+                              show_time=False,
+                              show_path=False)
+        logger.addHandler(handler)
+        logger.propagate = False
+        self.logger = logger
+
+    def get_logger(self):
+        return self.logger
+
+    def get_status_emoji(self, status: PolicyStatus):
+        if status == PolicyStatus.SUCCESS:
+            return ":white_check_mark:[green]"
+        if status == PolicyStatus.FAILURE:
+            return ":cross_mark:[red]"
+        if status == PolicyStatus.UNVERIFIED:
+            return ":exclamation_question_mark:[yellow]"