Info icon
End of Life Notice: For Trend Cloud One™ - Conformity Customers, Conformity will reach its End of Sale on “July 31st, 2025” and End of Life “July 31st, 2026”. The same capabilities and much more is available in TrendAI Vision One™ Cloud Risk Management. For details, please refer to Upgrade to TrendAI Vision One™
Use the Knowledge Base AI to help improve your Cloud Posture

Enable Auto-Tiering for Object Storage Buckets

TrendAI Vision One™ provides continuous assurance that gives peace of mind for your cloud infrastructure, delivering over 1400 automated best practice checks.

Risk Level: Medium (should be achieved)
Rule ID: OCI-ObjectStorage-007

Ensure that the Auto-Tiering feature is enabled for your Oracle Cloud Infrastructure (OCI) Object Storage buckets to automatically move objects that haven't been accessed for 31 days to the Infrequent Access (IA) tier.

Cost
optimisation

Auto-Tiering monitors data access patterns and automatically optimizes storage costs by moving OCI storage objects from the Standard tier to the more cost-effective Infrequent Access (IA) tier if they have not been accessed for 31 days. Enabled at the bucket level, this feature continuously monitors the access patterns of all objects within that bucket.


Audit

To determine if Auto-Tiering is enabled for your OCI Object Storage buckets, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to Object Storage & Archive Storage console available at https://cloud.oracle.com/object-storage/.

  3. In the left navigation panel, choose Buckets, and select an OCI compartment from the Compartment dropdown menu available next to Applied filters, to list the Object Storage buckets available within that compartment.

  4. Click on the name (link) of the bucket that you want to examine, listed in the Name column.

  5. Select the Details tab and check the Auto-tiering feature status, listed in the Features section. If Auto-tiering is set to Disabled, Auto-Tiering is not enabled for the selected OCI Object Storage bucket.

  6. Repeat steps no. 4 and 5 for each Object Storage bucket created in the selected Oracle Cloud Infrastructure (OCI) compartment.

  7. Repeat steps no. 3 – 6 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

Using OCI CLI

  1. Run iam compartment list command (Windows/macOS/Linux) with output query filters to list the ID of each compartment available in your Oracle Cloud Infrastructure (OCI) account:

    oci iam compartment list
    	--all
    	--include-root
    	--query 'data[]."id"'
    
  2. The command output should return the requested OCI compartment identifiers (OCIDs):

    [
    	"ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.compartment.oc1..abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd"
    ]
    
  3. Run os bucket list command (Windows/macOS/Linux) with the ID of the OCI compartment that you want to examine as the identifier parameter, the list the name of each Object Storage bucket available in the selected OCI compartment:

    oci os bucket list
    	--compartment-id 'ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--all
    	--query 'data[]."name"'
    
  4. The command output should return the requested bucket names:

    [
    	"cc-project5-data-bucket",
    	"cc-cloud-artifacts-bucket"
    ]
    
  5. Run os bucket get command (Windows/macOS/Linux) with the name of the Object Storage bucket that you want to examine as the identifier parameter and custom output filters to determine if the Auto-Tiering feature is enabled for the selected bucket:

    oci os bucket get
    	--bucket-name 'cc-project5-data-bucket'
    	--query 'data.{"auto-tiering":"auto-tiering"}'
    
  6. The command output should return the requested feature status:

    {
    	"auto-tiering": null
    }
    

    If the os bucket get command output returns "Disabled" or null for the "auto-tiering" configuration property, as shown in the output example above, Auto-Tiering is not enabled for the selected OCI Object Storage bucket.

  7. Repeat steps no. 5 and 6 for each Object Storage bucket provisioned in the selected OCI compartment.

  8. Repeat steps no. 3 – 7 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

Remediation / Resolution

To enable the Auto-Tiering feature for your OCI Object Storage buckets, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to Object Storage & Archive Storage console available at https://cloud.oracle.com/object-storage/.

  3. In the left navigation panel, choose Buckets, and select an OCI compartment from the Compartment dropdown menu available next to Applied filters, to list the Object Storage buckets available within that compartment.

  4. Click on the name (link) of the bucket that you want to configure, listed in the Name column.

  5. Choose the Details tab to access the configuration information available for the selected bucket.

  6. In the Features section, choose Enable next to the Auto-tiering feature status, then select Enable to turn on the Auto-Tiering feature for the selected Object Storage bucket.

  7. Repeat steps no. 4 - 6 for each bucket created in the selected Oracle Cloud Infrastructure (OCI) compartment.

  8. Repeat steps no. 3 – 7 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

Using OCI CLI

  1. Run os bucket update command (Windows/macOS/Linux) with the name of the Object Storage bucket that you want to configure as the identifier parameter, to enable the Auto-Tiering feature for the selected bucket:

    oci os bucket update
    	--bucket-name 'cc-project5-data-bucket'
    	--auto-tiering 'InfrequentAccess'
    
  2. The command output should return the configuration information available for the modified bucket:

    {
    	"data": {
    		"approximate-count": null,
    		"approximate-size": null,
    		"auto-tiering": "InfrequentAccess",
    		"compartment-id": "ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"created-by": "ocid1.user.oc1..abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"defined-tags": {},
    		"etag": "abcd1234-1234-1234-1234-abcd1234abcd",
    		"freeform-tags": {},
    		"id": "ocid1.bucket.oc1.ap-sydney-1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"is-read-only": false,
    		"kms-key-id": null,
    		"metadata": {},
    		"name": "cc-project5-bucket",
    		"namespace": "abcd1234abcd",
    		"object-events-enabled": false,
    		"object-lifecycle-policy-etag": null,
    		"public-access-type": "NoPublicAccess",
    		"replication-enabled": false,
    		"storage-tier": "Standard",
    		"time-created": "2025-12-01T17:41:13.541000+00:00",
    		"versioning": "Disabled"
    	},
    	"etag": "abcd1234-1234-1234-1234-abcd1234abcd"
    }
    
  3. Repeat steps no. 1 and 2 for each bucket created in the selected Oracle Cloud Infrastructure (OCI) compartment.

  4. Repeat steps no. 1 – 3 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

References

Publication date Dec 7, 2025