Control: OCI > Compute > Instance > Allowed > Region

Take an action when an OCI Compute instance is created in a region that is not allowed.

The Allowed > Region control checks if the instance is created in an allowed region based on the Allowed > Region > * policies. If the instance is created in a region that is not in the allowed list, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete if region not allowed and instance is new, this control will only take the enforcement actions for resources created within the last 60 minutes.

Note: Most OCI resources are compartment-scoped rather than region-scoped. This control applies to regional resources or checks the region metadata for compartment-scoped resources.