Info icon
End of Life Notice: For Trend Cloud One™ - Conformity Customers, Conformity will reach its End of Sale on “July 31st, 2025” and End of Life “July 31st, 2026”. The same capabilities and much more is available in TrendAI Vision One™ Cloud Risk Management. For details, please refer to Upgrade to TrendAI Vision One™
Use the Knowledge Base AI to help improve your Cloud Posture

Enable Cross-Region Volume Replication

TrendAI Vision One™ provides continuous assurance that gives peace of mind for your cloud infrastructure, delivering over 1400 automated best practice checks.

Risk Level: Medium (should be achieved)
Rule ID: OCI-BlockVolume-007

Ensure that Cross-Region Volume Replication for Oracle Cloud Infrastructure (OCI) Block Volumes is enabled to automatically and consistently copy your data to another OCI region. This critical safeguard is necessary to achieve a robust Disaster Recovery (DR) plan and ensure business continuity, allowing rapid failover and minimizing data loss following a regional outage.

Reliability

Enabling ongoing automatic asynchronous replication for Block Volumes across OCI regions provides up-to-date disaster recovery (DR) capability, ensuring low Recovery Point Objective (RPO) for critical data and enabling a swift, reliable business continuity failover strategy in the event of a regional outage, all without manual intervention.


Audit

To determine if cross-region replication is enabled for your OCI Block Volumes, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to Block Storage console available at https://cloud.oracle.com/block-storage/.

  3. In the left navigation panel, choose Block Volumes, and select an OCI compartment from the Compartment dropdown menu, next to Applied filters, to list the Block Volumes provisioned in that compartment.

  4. Click on the name (link) of the Block Volume that you want to examine, listed in the Name column.

  5. Select the Details tab to access the general configuration information available for the selected volume.

  6. In the Cross region replication section, check the Cross region replication attribute value to determine the feature status. If Cross region replication is set to Off, the Cross-Region Volume Replication feature is not enabled for the selected OCI Block Volume.

Using OCI CLI

  1. Run iam compartment list command (Windows/macOS/Linux) with output query filters to list the ID of each compartment available in your Oracle Cloud Infrastructure (OCI) account:

    oci iam compartment list
    	--all
    	--include-root
    	--query 'data[]."id"'
    
  2. The command output should return the requested OCI compartment identifiers (OCIDs):

    [
    	"ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.compartment.oc1..abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd"
    ]
    
  3. Run bv volume list command (Windows/macOS/Linux) with the ID of the OCI compartment that you want to examine as the identifier parameter, the list the ID of each Block Volume provisioned in the selected OCI compartment:

    oci bv volume list
    	--compartment-id 'ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--all
    	--query 'data[]."id"'
    
  4. The command output should return the requested volume IDs:

    [
    	"ocid1.volume.oc1.ap-sydney-1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.volume.oc1.ap-sydney-1.aaaabbbbccccddddabcdabcd1234abcd1234abcd1234abcd1234abcd1234"
    ]
    
  5. Run bv volume get command (Windows/macOS/Linux) with the name of the OCI Block Volume that you want to examine as the identifier parameter and custom output filters to determine if the Cross-Region Volume Replication feature is enabled for the selected volume:

    oci bv volume get
    	--volume-id 'ocid1.volume.oc1.ap-sydney-1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--query 'data."block-volume-replicas"[]."block-volume-replica-id"'
    
  6. The command output should return the ID (OCID) of the Block Volume replica provisioned for cross-region replication:

    Query returned empty result, no output to show.
    

    If the bv volume get command output does not return the requested resource ID, instead the following message is returned: Query returned empty result, no output to show., the Cross-Region Volume Replication feature is not enabled for the selected OCI Block Volume.

Remediation / Resolution

To enable asynchronous cross-region volume replication for your Oracle Cloud Infrastructure (OCI) Block Volumes, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to Block Storage console available at https://cloud.oracle.com/block-storage/.

  3. In the left navigation panel, choose Block Volumes, and select an OCI compartment from the Compartment dropdown menu, next to Applied filters, to list the Block Volumes provisioned in that compartment.

  4. Click on the name (link) of the Block Volume that you want to configure, listed in the Name column.

  5. Choose Edit from the page top menu to update the performance configuration for the selected volume.

  6. In the Cross ad/region replication section, perform the following actions to enable and configure the Cross-Region Volume Replication feature for the selected volume:

  7. Switch on the Enable cross ad/region replication button to enable the feature.

  8. Select the target region for the replica from the Target region dropdown list.

  9. Select the availability domain for the replica from the Target availability domain dropdown list.

  10. Enter a unique name for the replica in the Volume replica name box.

  11. Cross-region volume replication will replicates your volume in the selected region and availability domain, and your bill will include the applicable storage and network costs for the replica in the destination region. Select the Confirm checkbox for confirmation.

  12. For Cross region replica encryption, choose whether to use an Oracle-managed key or a Customer-Managed Key (CMK) for replica encryption. For CMK-based encryption, see Block Volumes Encrypted with Customer-Managed Keys.

  13. Choose Update to apply the configuration changes.

Using OCI CLI

  1. Run iam compartment list command (Windows/macOS/Linux) with output query filters to list the ID of each compartment available in your Oracle Cloud Infrastructure (OCI) account:

    oci iam compartment list
    	--all
    	--include-root
    	--query 'data[]."id"'
    
  2. The command output should return the requested OCI compartment identifiers (OCIDs):

    [
    	"ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.compartment.oc1..abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd"
    ]
    
  3. Run bv volume list command (Windows/macOS/Linux) with the ID of the OCI compartment that you want to examine as the identifier parameter, the list the ID of each Block Volume provisioned in the selected OCI compartment:

    oci bv volume list
    	--compartment-id 'ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--all
    	--query 'data[]."id"'
    
  4. The command output should return the requested volume IDs:

    [
    	"ocid1.volume.oc1.ap-sydney-1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.volume.oc1.ap-sydney-1.aaaabbbbccccddddabcdabcd1234abcd1234abcd1234abcd1234abcd1234"
    ]
    
  5. Run bv volume update command (Windows/macOS/Linux) with the name of the OCI Block Volume that you want to configure as the identifier parameter, to enable asynchronous cross-region volume replication for the selected volume. For "displayName", provide a unique name for your volume replica. For "availabilityDomain", specify the availability domain for the replica:

    oci bv volume update
    	--volume-id 'ocid1.volume.oc1.ap-sydney-1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--block-volume-replicas '[{"displayName":"cc-project5-volume-replica","availabilityDomain":"ABCD:AP-MELBOURNE-1-AD-1"}]'
    
  6. Type Y and press Enter for confirmation:

    WARNING: Updates to defined-tags and freeform-tags and block-volume-replicas and autotune-policies will replace any existing values. Are you sure you want to continue? [y/N]: Y
    
  7. The command output should return the configuration information available for the modified OCI Block Volume:

    {
    	"data": {
    		"auto-tuned-vpus-per-gb": null,
    		"autotune-policies": [],
    		"availability-domain": "ABCD:AP-SYDNEY-1-AD-1",
    		"block-volume-replicas": null,
    		"cluster-placement-group-id": null,
    		"compartment-id": "ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"defined-tags": {},
    		"display-name": "cc-project5-block-volume",
    		"freeform-tags": {},
    		"id": "ocid1.volume.oc1.ap-sydney-1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"is-auto-tune-enabled": false,
    		"is-hydrated": true,
    		"is-reservations-enabled": false,
    		"kms-key-id": null,
    		"lifecycle-state": "AVAILABLE",
    		"size-in-gbs": 50,
    		"size-in-mbs": 51200,
    		"source-details": null,
    		"system-tags": {},
    		"time-created": "2025-10-20T12:07:48.986000+00:00",
    		"volume-group-id": null,
    		"vpus-per-gb": 10
    	},
    	"etag": "1234abcd1234abcd1234abcd1234abcd"
    }
    

References

Publication date Nov 10, 2025