Oracle Cloud Infrastructure Documentation

Policy-Based Backups

The Oracle Cloud Infrastructure Block Volume service provides you with the capability to perform volume backups automatically on a schedule and retain them based on the selected backup policy. This allows you to adhere to your data compliance and regulatory requirements.

Warning

Deleting Block Volumes with Policy-Based Backups

All policy-based backups will eventually expire, so if you want to keep a volume backup indefinitely, you need to create a manual backup.

There are two kinds of backup policies:

  • Oracle defined: Predefined backup policies that have a set backup frequency and retention period. You cannot modify these policies.

  • User defined: Custom backup policies that you create and configure schedules for.

Oracle Defined Backup Policies

There are three Oracle defined backup policies, Bronze, Silver, and Gold. Each backup policy is comprised of schedules with a set backup frequency and a retention period that you cannot modify. If the backup policy settings for Oracle defined policies don't meet your requirements, you should use User Defined Backup Policies instead. With user defined backup policies you define and control the schedules.

Bronze Policy

The bronze policy includes monthly incremental backups, run on the first day of the month. These backups are retained for twelve months. This policy also includes a full backup, run yearly on January 1st. Full backups are retained for five years.

Silver Policy

The silver policy includes weekly incremental backups that run on Sunday. These backups are retained for four weeks. This policy also includes monthly incremental backups, run on the first day of the month and are retained for twelve months. Also includes a full backup, run yearly on January 1st. Full backups are retained for five years.

Gold Policy

The gold policy includes daily incremental backups. These backups are retained for seven days. This policy also includes weekly incremental backups that run on Sunday and are retained for four weeks. Also includes monthly incremental backups, run on the first day of the month, retained for twelve months, and a full backup, run yearly on January 1st. Full backups are retained for five years.

User Defined Backup Policies

Oracle Cloud Infrastructure enables you to customize your backup schedules with user defined policies. These are backup policies that you define the backup frequency and retention period for. There are two parts to user defined backup policies, the backup policy itself, and then one or more schedules in the policy.

To get started with user defined backup policies, you need to first create the backup policy, see To create a user defined backup policy. After this step, you have an empty backup policy, so the next step is to define and add schedules to the policy.

Schedules

Schedules define the backup frequency and retention period for a user defined backup policy, just like Oracle defined backup policies. The difference is that you can customize the schedules associated with user defined policies. This gives you control over the backup frequency and retention period.

When defining a schedule for a user defined backup policy, the first thing you configure is the schedule type, this specifies the backup frequency. Oracle Cloud Infrastructure provides the following schedule types:

  • Daily: Backups are generated daily. You specify the hour of the day for the backup.

  • Weekly: Backups are generated weekly. You specify the day of the week, and the hour of that day for the backup.

  • Monthly: Backups are generated monthly. You specify the day of the month, and the hour of that day for the backup.

  • Yearly: Backups are generated yearly. You specify the month, the day of that month, and the hour of that day for the backup.

In addition to frequency, you also configure the following:

  • Retention time: The amount of time to keep the backup, in days, weeks, months, or years. The time period is based the schedule type.

  • Backup type Options are full or incremental, see Volume Backup Types for more information.

  • Timezone The time zone to use for the backup schedule. Options are UTC or the regional data center time zone.

For more information, see To add a schedule to a user defined backup policy.

You can also edit or remove schedules for a user defined policy at any time, see To edit a schedule for a user defined backup policy and To delete a schedule for a user defined backup policy.

Duplicating Existing Backup Policies

You can create a new backup policy by duplicating any of the existing backup policies.

If one of the Oracle defined policies is close to meeting your volume backup requirements, but with some changes, you can create a new backup policy by duplicating the Oracle defined policy. This creates a new user defined backup policy with schedules already assigned, enabling you to use the Oracle defined policy's settings as a starting point to save time and simplify the process.

You can also duplicate an existing user defined policy. For more information, see To duplicate a backup policy. You can then add, edit, or delete schedules for the new backup policy.

Working with Backup Policies

There are two types of tasks when working with backup policies:

The linked sections listed above provide information for working with backup policies using the Console, CLI, and REST APIs.

Required IAM Policy

To use Oracle Cloud Infrastructure, you must be given the required type of access in a policy  written by an administrator, whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you try to perform an action and get a message that you don’t have permission or are unauthorized, confirm with your administrator the type of access you've been granted and which compartment  you should work in.

Important

To view or work with backup policies, you need access to the root compartment, which is where the predefined backup policies are located.

For administrators: The policy in Let volume admins manage block volumes, backups, and volume groups lets the specified group do everything with block volumes and backups. The policy in Let volume backup admins manage only backups further restricts access to just creating and managing backups.

Tip

When users create a backup from a volume or restore a volume from a backup, the volume and backup don't have to be in the same compartment . However, users must have access to both compartments.

If you're new to policies, see Getting Started with Policies and Common Policies. For reference material about writing policies for instances, cloud networks, or other Core Services API resources, see Details for the Core Services.

Tagging Resources

You can apply tags to your resources to help you organize them according to your business needs. You can update the resource later with the desired tags. For general information about applying tags, see Resource Tags.

Creating and Configuring User Defined Backup Policies

Using the Console

You can use the Console to create and update user defined backup policies.

To create a user defined backup policy
To add a schedule to a user defined backup policy
To duplicate a backup policy
To edit a schedule for a user defined backup policy
To delete a schedule for a user defined backup policy
To delete a user defined backup policy

Using the CLI

For information about using the CLI, see Command Line Interface (CLI).

Use the following operations to work with backup policies:

To create a user defined backup policy
To list the backup policies in a specified compartment
To retrieve a specific backup policy
To update the display name for a user defined backup policy
To update the schedules for a user defined backup policy
To delete a user defined backup policy

Using the API

Use the following operations to work with backup policies:

For information about using the API and signing requests, see REST APIs and Security Credentials. For information about SDKs, see Software Development Kits and Command Line Interface.

For more information about backups, see Overview of Block Volume Backups and Restoring a Backup to a New Volume.

Managing Backup Policy Assignments to Volumes

Using the Console

You can use the Console to assign, change, or remove both user defined and Oracle defined backup policies for existing volumes.

To assign a backup policy to a volume
To change a backup policy assigned to a volume
To remove a backup policy assigned to a volume

Using the CLI

For information about using the CLI, see Command Line Interface (CLI).

Use the following operations to work with volume backup policy assignments to volumes:

To assign a backup policy to a volume
To get the backup policy assigned to a volume
To retrieve a specific backup policy assignment
To delete a backup policy assignment

Using the API

Use the following operations to manage backup policy assignments to volumes:

For information about using the API and signing requests, see REST APIs and Security Credentials. For information about SDKs, see Software Development Kits and Command Line Interface.

For more information about backups, see Overview of Block Volume Backups and Restoring a Backup to a New Volume.