# Ensure Object Storage bucket has versioning enabled

- Source: https://support.icompaas.com/support/solutions/articles/a_1790698522269766-ensure-object-storage-bucket-has-versioning-enabled
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Oracle Cloud](https://support.icompaas.com/support/solutions/c_1790697859097233) › [Checks](https://support.icompaas.com/support/solutions/folders/f_1790697878907807)
- Last updated: 2026-09-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure object versioning is enabled for Object Storage buckets that hold important data, so that every overwrite or deletion keeps the previous version of the object. Older versions can then be restored if an object is changed or deleted by mistake or by an attacker.

**Rationale**

Without versioning, overwriting or deleting an object removes the previous data permanently. Accidental changes, faulty applications, or ransomware can then destroy data with no way to recover it. Versioning keeps earlier copies, and combined with lifecycle rules for old versions, it balances recovery with storage cost.

**Impact**

-   Deleted or overwritten objects can be recovered
    
-   Protects against ransomware and accidental changes
    
-   Increases storage usage, so lifecycle rules for old versions are recommended
    

**Default Value**

By default, object versioning is disabled for new buckets.

**Pre-Requisites**

-   Permission to manage buckets in the compartment
    

**Test Plan**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Storage, and under Object Storage & Archive Storage select Buckets. Choose the compartment and select the bucket.
    
3.  Select the Bucket information tab and check the Object versioning value.
    
4.  If it shows Disabled, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Storage, and under Object Storage & Archive Storage select Buckets. Choose the compartment and select the bucket.
    
3.  Next to Object versioning, select Edit.
    
4.  Select Enable versioning and confirm.
    
5.  Optionally, add a lifecycle policy rule to delete previous versions after a set number of days.
    

**Backout Plan**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Storage, and under Object Storage & Archive Storage select Buckets. Choose the compartment and select the bucket.
    
3.  Next to Object versioning, select Edit, select Suspend versioning, and confirm. Existing versions are kept.
    

**Reference**

-   [https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm](https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.