Oracle Database@Azure
| Recommendation | Provider Namespace | Resource Type |
|---|---|---|
| Ensure ODAA infrastructure is in Available state under normal operations | Oracledatabase | cloudexadatainfrastructures |
| Ensure ODAA clusters are in Available state under normal operations | Oracledatabase | cloudvmclusters |
Summary
Details
Implement Oracle Data Guard replication across availability zones
Impact: High Category: Business Continuity
APRL GUID: ccf0fece-27c7-4163-98ce-a1dd982d7f79
Description:
Oracle Database@Azure follows a Silver-level reference architecture that provides HA by default however it is vulnerable to AZ failures. Gold-level adds Data Guard replication across AZs via Automated DG or manual setup. Use SYNC for zero data loss or ASYNC when performance is constrained.
Potential Benefits:
Ensure business continuity in case of zonal failure.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Implement a regional replication strategy for Oracle to meet your workload requirements
Impact: High Category: Disaster Recovery
APRL GUID: dfeb9c7a-7dae-4751-9625-b23a7160a3e1
Description:
Gold-level reference architecture with Oracle Database@Azure is recommended, meaning that database changes will be replicated via Data Guard (ASYNC replication) to a secondary Oracle Database@Azure instance in a different region.
Potential Benefits:
The cloud MAA architecture achieves data protection and DR.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Implement Autonomous Recovery Service in Azure for ODAA backup strategy
Impact: High Category: Disaster Recovery
APRL GUID: 0583239a-dfb5-44d4-94db-804bfc8e3bd1
Description:
Enable OCI-managed backup to Autonomous Recovery Service in Azure for data protection. ARS provides automated, policy-based backups with continuous validation.
Potential Benefits:
Provide workload data protection.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Monitor critical Oracle Database metrics with defined thresholds and scale accordingly
Impact: Medium Category: Scalability
APRL GUID: 2322a597-a6af-4c3e-a1b1-d1b1ddead508
Description:
Monitor database metrics such as CPU utilization and memory usage with Azure Monitor, setting alerts for scaling decisions. Auto-scaling isn't available on Oracle Exadata Database@Azure. If needed, scale OCPUs on the VM cluster, if Exa infrastructure capacity allows.
Potential Benefits:
Meet workload scalability requirements.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Plan and implement IP addressing strategy to meet current and future requirements
Impact: Medium Category: Other Best Practices
APRL GUID: 1bfdf86c-f501-4ad9-99a7-b29b736f34dc
Description:
Design an IP addressing scheme considering current and future Oracle workload needs to prevent conflicts and ensure availability. Primary, standby, client, and backup subnets should have non-overlapping CIDR ranges for reliable connectivity.
Potential Benefits:
Avoid conflicts in IP addressing.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Deploy Data Guard observer in different Availability zones for high availability
Impact: High Category: Business Continuity
APRL GUID: 768a5b06-41d4-4f10-b544-fbd2f6999af4
Description:
Deploy Data Guard observer nodes in different AZs and make sure that an observer node will remain available if anything happens to the Production deployment.
Potential Benefits:
Data Guard observer automates database failover.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Store encryption keys in Azure Key Vault for Exadata workloads
Impact: High Category: Security
APRL GUID: bbe4014f-c49d-475d-9c48-76cb3c190483
Description:
Store Oracle TDE master encryption keys for Exadata workloads in Azure Key Vault to centralize key management, improve security, and support compliance with enterprise-grade controls.
Potential Benefits:
Storing keys in AKV improves security and reliability.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Ensure Oracle Database@Azure Infrastructure is updated in a rolling manner.
Impact: High Category: Other Best Practices
APRL GUID: 02bfe908-d958-451a-a603-bef8277ae56a
Description:
Non-rolling maintenance incurs a downtime. Automatic infrastructure maintenance occurs quarterly, with Oracle notifying you of the date and time weeks in advance. You can modify the scheduled date and time before maintenance starts.
Potential Benefits:
Keep Oracle workloads up-to-date.
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// Azure Resource Graph Query
// This resource graph query will return rows if Oracle Database@Azure Infrastructure Maintenance is not Rolling
resources
| where type == "oracle.database/cloudexadatainfrastructures"
| where properties.maintenanceWindow.patchingMode !~ "Rolling"
| project recommendationId = "02bfe908-d958-451a-a603-bef8277ae56a",id=tostring(id),name,tags, param1 = "ODAAInfraMaintRolling: False"