Info icon
End of Life Notice: For Trend Cloud One™ - Conformity Customers, Conformity will reach its End of Sale on “July 31st, 2025” and End of Life “July 31st, 2026”. The same capabilities and much more is available in TrendAI Vision One™ Cloud Risk Management. For details, please refer to Upgrade to TrendAI Vision One™
Use the Knowledge Base AI to help improve your Cloud Posture

Enable Object Storage Replication

TrendAI Vision One™ provides continuous assurance that gives peace of mind for your cloud infrastructure, delivering over 1400 automated best practice checks.

Risk Level: Medium (should be achieved)
Rule ID: OCI-ObjectStorage-006

Ensure that object replication is enabled for your Oracle Cloud Infrastructure (OCI) Object Storage buckets to maintain business continuity by creating automatic, up-to-date copies of your data in a different region, protecting against regional outages or disasters and supporting fast disaster recovery.

Reliability

Object Storage replication provides protection against regional outages, significantly aids disaster recovery efforts, and meets stringent data redundancy compliance requirements. Furthermore, by maintaining replicated copies closer to users, it can help reduce data access latency.


Audit

To determine if object replication is enabled for your OCI Object Storage buckets, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to Object Storage & Archive Storage console available at https://cloud.oracle.com/object-storage/.

  3. In the left navigation panel, choose Buckets, and select an OCI compartment from the Compartment dropdown menu available next to Applied filters, to list the Object Storage buckets available within that compartment.

  4. Click on the name (link) of the bucket that you want to examine, listed in the Name column.

  5. Select the Policies tab and check the Replication policy list to identify any replication policies created for the selected bucket. If there are no replication policies listed in the Replication policy section, instead the following message is displayed: No items to display, object replication is not enabled for the selected Oracle Cloud Infrastructure (OCI) Object Storage bucket.

  6. Repeat steps no. 4 and 5 for each Object Storage bucket created in the selected Oracle Cloud Infrastructure (OCI) compartment.

  7. Repeat steps no. 3 – 6 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

Using OCI CLI

  1. Run iam compartment list command (Windows/macOS/Linux) with output query filters to list the ID of each compartment available in your Oracle Cloud Infrastructure (OCI) account:

    oci iam compartment list
    	--all
    	--include-root
    	--query 'data[]."id"'
    
  2. The command output should return the requested OCI compartment identifiers (OCIDs):

    [
    	"ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.compartment.oc1..abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd"
    ]
    
  3. Run os bucket list command (Windows/macOS/Linux) with the ID of the OCI compartment that you want to examine as the identifier parameter, the list the name of each Object Storage bucket available in the selected OCI compartment:

    oci os bucket list
    	--compartment-id 'ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--all
    	--query 'data[]."name"'
    
  4. The command output should return the requested bucket names:

    [
    	"cc-project5-data-bucket",
    	"cc-cloud-artifacts-bucket"
    ]
    
  5. Run os bucket get command (Windows/macOS/Linux) with the name of the Object Storage bucket that you want to examine as the identifier parameter and custom output filters to determine if object replication is enabled for the selected bucket:

    oci os bucket get
    	--bucket-name 'cc-project5-data-bucket'
    	--query 'data."replication-enabled"'
    
  6. The command output should return the requested feature status (true for enabled, false for disabled):

    false
    

    If the os bucket get command output returns false, as shown in the output example above, object replication is not enabled for the selected Oracle Cloud Infrastructure (OCI) Object Storage bucket.

  7. Repeat steps no. 5 and 6 for each Object Storage bucket provisioned in the selected OCI compartment.

  8. Repeat steps no. 3 – 7 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

Remediation / Resolution

To enable the Object Replication feature for your OCI Object Storage buckets, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to Object Storage & Archive Storage console available at https://cloud.oracle.com/object-storage/.

  3. In the left navigation panel, choose Buckets, and select an OCI compartment from the Compartment dropdown menu available next to Applied filters, to list the Object Storage buckets available within that compartment.

  4. Click on the name (link) of the bucket that you want to configure, listed in the Name column.

  5. Select the Policies tab, choose Create policy from the Replication policy section, and perform the following actions to create the necessary replication policy:

    1. For Name, enter a unique name for the new replication policy. By default, Object Storage generates a policy name that reflects the current year, month, day, and time.
    2. Select the OCI region that contain the destination bucket that you want to replicate to, from the Destination region dropdown list.
    3. Select the destination OCI compartment from the Destination bucket compartment dropdown list.
    4. Select the destination bucket for object replication from the Destination bucket dropdown list.
    5. Choose Create policy to create the new OCI Object Storage replication policy.
  6. Repeat steps no. 4 and 5 for each bucket created in the selected Oracle Cloud Infrastructure (OCI) compartment.

  7. Repeat steps no. 3 – 7 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

Using OCI CLI

  1. Run os replication create-replication-policy command (Windows/macOS/Linux) to create the replication policy required to enable object replication for the selected Oracle Cloud Infrastructure (OCI) Object Storage bucket. For --destination-region and --destination-bucket, specify the destination region and bucket for the object replication:

    oci os replication create-replication-policy
    	--name 'cc-project5-replication-policy'
    	--bucket-name 'cc-project5-data-bucket'
    	--destination-region 'ap-sydney-1'
    	--destination-bucket 'cc-project5-destination-bucket'
    
  2. The command output should return the information available for the new replication policy:

    {
    	"data": {
    		"destination-bucket-name": "cc-project5-destination-bucket",
    		"destination-region-name": "ap-sydney-1",
    		"id": "abcd1234-1234-abcd-1234-abcd1234abcd",
    		"name": "cc-project5-replication-policy",
    		"status": "ACTIVE",
    		"status-message": "The policy is active.",
    		"time-created": "2025-12-01T19:42:58+00:00",
    		"time-last-sync": null
    	}
    }
    
  3. Repeat steps no. 1 and 2 for each bucket created in the selected Oracle Cloud Infrastructure (OCI) compartment.

  4. Repeat steps no. 1 – 3 for each OCI compartment available in your Oracle Cloud Infrastructure (OCI) account.

References

Publication date Dec 7, 2025