Oracle Cloud Infrastructure Documentation

Copying a Volume Backup Between Regions

You can copy volume backups from one region to another region using the Oracle Cloud Infrastructure Block Volume service. For more information, see Copying Block Volume Backups Across Regions.

Note

Limitations for Copying Volume Backups Across Regions

Copying backups for block volumes encrypted using Key Management across regions is not supported.

Copying boot volume backups across regions is not supported.

When copying block volume backups across regions in your tenancy, you can only copy one backup at a time from a specific source region.

Required IAM Policy

To use Oracle Cloud Infrastructure, you must be given the required type of access in a An IAM document that specifies who has what type of access to your resources. It is used in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources. written by an administrator, whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you try to perform an action and get a message that you don’t have permission or are unauthorized, confirm with your administrator the type of access you've been granted and which A collection of related resources that can be accessed only by certain groups that have been given permission by an administrator in your organization. you should work in.

For administrators: The first two statements listed in the Let volume admins manage block volumes and backups policy lets the specified group do everything with block volumes and backups with the exception of copying volume backups across regions. The aggregate resource type volume-family does not include the VOLUME_BACKUP_COPY permission, so to enable copying volume backups across regions you need to ensure that you include the third statement in that policy, which is:

Allow group VolumeAdmins to copy volume-backups in tenancy

To restrict access to just creating and managing volume backups, including copying volume backups between regions, use the policy in Let volume backup admins manage only backups. The individual resource type volume-backups includes the VOLUME_BACKUP_COPY permission, so you do not need to specify it explicitly in this policy.

Restricting Access

The specific permissions needed to copy volume backups across regions are:

  • Source region: VOLUME_BACKUP_READ, VOLUME_BACKUP_COPY

  • Destination region: VOLUME_BACKUP_CREATE

Sample Policies

To restrict a group to specific source and destination regions for copying volume backups
To restrict some source regions to specific destination regions while enabling all destination regions for other source regions

If you're new to policies, see Getting Started with Policies and Common Policies. If you want to dig deeper into writing policies for instances, cloud networks, or other Core Services API resources, see Details for the Core Services.

Using the Console

  1. Open the navigation menu. Under Block Storage, click Block Volume Backups.

    A list of the block volume backups in the compartment you're viewing is displayed. If you don’t see the one you're looking for, make sure you’re viewing the correct compartment (select from the list on the left side of the page).

  2. Click the Actions icon (three dots) for the block volume backup you want to copy to another region.
  3. Click Copy to Another Region.
  4. Enter a name for the backup and choose the region to copy the backup to.

  5. Click Copy Block Volume Backup.

  6. Confirm that the source and destination region details are correct in the confirmation dialog and then click OK.

Using the API

To copy a volume backup to another region, use the following operation:

For information about using the API and signing requests, see REST APIs and Security Credentials. For information about SDKs, see Software Development Kits and Command Line Interface.

Next Steps

After copying the block volume backup, switch to the destination region in the Console and verify that the copied backup appears in the list of block volume backups for that region. You can then restore the backup by creating a new block volume from it using the steps in Restoring a Backup to a New Volume.

For more information about backups, see Overview of Block Volume Backups.