Oracle Cloud Infrastructure Documentation

Policy-Based Backups

The Oracle Cloud Infrastructure Block Volume service provides you with the capability to perform volume backups automatically on a schedule and retain them based on the selected backup policy. This allows you to adhere to your data compliance and regulatory requirements.

Warning

Deleting Block Volumes with Policy-Based Backups

All policy-based backups will eventually expire, so if you want to keep a volume backup indefinitely, you need to create a manual backup.

Volume Backup Policies

There are three predefined backup policies, Bronze, Silver, and Gold. Each backup policy has a set backup frequency and retention period.

Bronze Policy

The bronze policy includes monthly incremental backups, run on the first day of the month. These backups are retained for twelve months. This policy also includes a full backup, run yearly on January 1st. Full backups are retained for five years.

Silver Policy

The silver policy includes weekly incremental backups that run on Sunday. These backups are retained for four weeks. This policy also includes monthly incremental backups, run on the first day of the month and are retained for twelve months. Also includes a full backup, run yearly on January 1st. Full backups are retained for five years.

Gold Policy

The gold policy includes daily incremental backups. These backups are retained for seven days. This policy also includes weekly incremental backups that run on Sunday and are retained for four weeks. Also includes monthly incremental backups, run on the first day of the month, retained for twelve months, and a full backup, run yearly on January 1st. Full backups are retained for five years.

Assigning a Backup Policy to Volumes

When you create a new volume on Oracle Cloud Infrastructure you can select the appropriate backup policy at that time, for more information, see Creating a Volume.

If your requirements change, you can adjust the schedule and retention period by selecting a different backup policy or by removing it all together. You can also assign a backup policy to an existing volume. See Using the Console.

Required IAM Policy

To use Oracle Cloud Infrastructure, you must be given the required type of access in a An IAM document that specifies who has what type of access to your resources. It is used in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources. written by an administrator, whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you try to perform an action and get a message that you don’t have permission or are unauthorized, confirm with your administrator the type of access you've been granted and which A collection of related resources that can be accessed only by certain groups that have been given permission by an administrator in your organization. you should work in.

Important

To view or work with backup policies, you need access to the root compartment, which is where the predefined backup policies are located.

For administrators: The policy in Let volume admins manage block volumes and backups lets the specified group do everything with block volumes and backups. The policy in Let volume backup admins manage only backups further restricts access to just creating and managing backups.

Tip

When users create a backup from a volume or restore a volume from a backup, the volume and backup don't have to be in the same A collection of related resources that can be accessed only by certain groups that have been given permission by an administrator in your organization.. However, users must have access to both compartments.

If you're new to policies, see Getting Started with Policies and Common Policies. If you want to dig deeper into writing policies for instances, cloud networks, or other Core Services API resources, see Details for the Core Services.

Using the Console

You can use the Console to assign or change the backup policy for an existing volume.

To assign a backup policy
To remove a backup policy
To change a backup policy

For more information about backups, see Overview of Block Volume Backups and Restoring a Backup to a New Volume.