interface LockConfiguration
Language | Type name |
---|---|
![]() | Amazon.CDK.AWS.Backup.LockConfiguration |
![]() | github.com/aws/aws-cdk-go/awscdk/v2/awsbackup#LockConfiguration |
![]() | software.amazon.awscdk.services.backup.LockConfiguration |
![]() | aws_cdk.aws_backup.LockConfiguration |
![]() | aws-cdk-lib » aws_backup » LockConfiguration |
Configuration for AWS Backup Vault Lock.
See also: https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html
Example
new backup.BackupVault(this, 'Vault', {
lockConfiguration: {
minRetention: Duration.days(30),
},
});
Properties
Name | Type | Description |
---|---|---|
min | Duration | The minimum retention period that the vault retains its recovery points. |
changeable | Duration | The duration before the lock date. |
max | Duration | The maximum retention period that the vault retains its recovery points. |
minRetention
Type:
Duration
The minimum retention period that the vault retains its recovery points.
If this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or longer than the minimum retention period. If the job's retention period is shorter than that minimum retention period, then the vault fails that backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected.
changeableFor?
Type:
Duration
(optional, default: Vault Lock can be deleted or changed at any time)
The duration before the lock date.
AWS Backup enforces a 72-hour cooling-off period before Vault Lock takes effect and becomes immutable.
Before the lock date, you can delete Vault Lock from the vault or change the Vault Lock configuration. On and after the lock date, the Vault Lock becomes immutable and cannot be changed or deleted.
maxRetention?
Type:
Duration
(optional, default: Vault Lock does not enforce a maximum retention period)
The maximum retention period that the vault retains its recovery points.
If this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or shorter than the maximum retention period. If the job's retention period is longer than that maximum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected.