Oracle Cloud Infrastructure Object Storage

Integrated data protection

Enterprises store data and backups on OCI Object Storage, which runs on redundant hardware for built-in durability. Data integrity is actively monitored, with any corrupt data detected and healed by automatically recreating a copy of the data.

End-to-end visibility

OCI Object Storage provides a dedicated (non-shared) storage ‘namespace’ or container unique to each customer for all stored buckets and objects. This encapsulation provides end-to-end visibility and reduces the risk of exposed buckets. Customers can define access to meet exact organizational requirements and avoid the open bucket vulnerabilities associated with AWS S3’s shared global namespace. Read more about AWS S3 data leaks.

Long-term, low-cost storage

For longer-term data storage needs like compliance and audit mandates and log data, OCI Archive Storage uses the same APIs as Object Storage for easy setup and integration but at one-tenth the cost. Data is monitored for integrity, automatically healed, and encrypted at rest.

Redundancy across fault domains

With OCI Object Storage, stored objects are automatically replicated across fault domains or across regions to gain durability. Customers can combine replication with lifecycle management policies to automatically populate, archive, and delete objects.

Data integrity monitoring

OCI Object Storage automatically and actively monitors the integrity of data using checksums. If corrupted data is detected, it’s flagged for remedy without human intervention.

Automatic self-healing

When a data integrity issue is identified, corrupt data is automatically ‘healed’ from redundant copies. Any loss of data redundancy is managed automatically with creation of a new copy of the data. With Object Storage, there’s no need for concern about accessing down-level data. Object Storage always serves the most recent copy of data written to the system.

Backed by 99.9% SLA

Customers rely on Object Storage, which is backed by a 99.9% Availability SLA. Oracle also offers manageability and performance SLAs for many cloud services that are not available from other cloud platform vendors. A complete listing of availability, manageability, and performance SLAs for Oracle Cloud services is available here.

Encryption by default

All Object Storage data at rest is encrypted by default using 256-bit AES encryption. By default, Object Storage service manages encryption keys. Alternatively, customers can supply their own encryption key to either use with Oracle Cloud Infrastructure (OCI) Vault or manage data separately.

• See overview of OCI Vault for details

Continuous threat assessment

Oracle Cloud Guard continuously monitors data to detect anomalous events, then automatically intervenes when it detects suspect user behavior. For example, machine learning-powered security services revoke user permissions when it detects suspicious patterns.

Greater control reduces risk

With OCI Object Storage, managerial controls provide complete control over the tenancy to prevent common vulnerabilities that can lead to data leaks. Many serious data leaks have taken place due to open Amazon S3 buckets, which publicly exposed sensitive information, including usernames and passwords, medical records, and credit reports.

Oracle Cloud Infrastructure Identity and Access Management

Using easy-to-define policies organized by logical groups of users and resources, OCI Identity and Access Management controls not only who has access to OCI resources but also which ones and the access type. Customers can manage identities and grant access using existing organizational hierarchies and federated directory services, including Microsoft, Okta, and other SAML directory providers.

Isolated network virtualization

Prevent attacks on customer tenancies with isolated network virtualization. A foundational element of OCI’s security-first architecture, a custom-designed SmartNIC isolates and virtualizes the network, stopping malware in its tracks.

Flexible access options

OCI Object Storage can be accessed via Command Line Interface (CLI), Console, Java SDK, or REST API. Within the console, the new Cloud Shell provides access to an always-available Linux shell directly in the OCI Console.

API compatibility

OCI Object Storage provides API compatibility with the OpenStack Swift API and Amazon S3 through Oracle Cloud’s Amazon S3 Compatibility API. This allows customers to continue using their existing Amazon S3 tools (for example, SDK clients), minimizing the need to make changes to their applications. Customers can use Oracle’s HDFS connector to easily run Hadoop or Spark jobs against data in OCI Object Storage service.

Cloud Storage Gateway

Oracle Cloud Infrastructure (OCI) Storage Gateway lets users connect on-premises applications with OCI. Applications that can write data to a network file service (NFS) target can also write data to OCI Object Storage. Any Linux/UNIX NFS client certified to work with NFSv4 server running on Oracle Linux 7.x is compatible.

Low, uniform, global pricing

Customer spend on Oracle data storage is transparent and predictable. Consistent global OCI Object and Archive Storage pricing offers savings of 30% or more in some geographies relative to competitors. For example, Amazon S3 in Sao Paolo Brazil is priced at 38% more per GB ($0.0405 per GB/mo.) than Oracle Object Storage ($0.0255 per GB/mo.)