AWS::Rbin::Rule - AWS CloudFormation
SyntaxPropertiesReturn valuesExamples

AWS::Rbin::Rule

Creates a Recycle Bin retention rule. You can create two types of retention rules:

  • Tag-level retention rules - These retention rules use resource tags to identify the resources to protect. For each retention rule, you specify one or more tag key and value pairs. Resources (of the specified type) that have at least one of these tag key and value pairs are automatically retained in the Recycle Bin upon deletion. Use this type of retention rule to protect specific resources in your account based on their tags.

  • Region-level retention rules - These retention rules, by default, apply to all of the resources (of the specified type) in the Region, even if the resources are not tagged. However, you can specify exclusion tags to exclude resources that have specific tags. Use this type of retention rule to protect all resources of a specific type in a Region.

For more information, see Create Recycle Bin retention rules in the Amazon EBS User Guide.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "Type" : "AWS::Rbin::Rule",
  "Properties" : {
      "Description" : String,
      "ExcludeResourceTags" : [ ResourceTag, ... ],
      "LockConfiguration" : UnlockDelay,
      "ResourceTags" : [ ResourceTag, ... ],
      "ResourceType" : String,
      "RetentionPeriod" : RetentionPeriod,
      "Status" : String,
      "Tags" : [ Tag, ... ]
    }
}

Properties

Description

The retention rule description.

Required: No

Type: String

Maximum: 255

Update requires: No interruption

ExcludeResourceTags

[Region-level retention rules only] Specifies the exclusion tags to use to identify resources that are to be excluded, or ignored, by a Region-level retention rule. Resources that have any of these tags are not retained by the retention rule upon deletion.

You can't specify exclusion tags for tag-level retention rules.

Required: No

Type: Array of ResourceTag

Maximum: 5

Update requires: No interruption

LockConfiguration

Information about the retention rule lock configuration.

Required: No

Type: UnlockDelay

Update requires: No interruption

ResourceTags

[Tag-level retention rules only] Specifies the resource tags to use to identify resources that are to be retained by a tag-level retention rule. For tag-level retention rules, only deleted resources, of the specified resource type, that have one or more of the specified tag key and value pairs are retained. If a resource is deleted, but it does not have any of the specified tag key and value pairs, it is immediately deleted without being retained by the retention rule.

You can add the same tag key and value pair to a maximum or five retention rules.

To create a Region-level retention rule, omit this parameter. A Region-level retention rule does not have any resource tags specified. It retains all deleted resources of the specified resource type in the Region in which the rule is created, even if the resources are not tagged.

Required: No

Type: Array of ResourceTag

Maximum: 50

Update requires: No interruption

ResourceType

The resource type to be retained by the retention rule. Currently, only Amazon EBS snapshots and EBS-backed AMIs are supported. To retain snapshots, specify EBS_SNAPSHOT. To retain EBS-backed AMIs, specify EC2_IMAGE.

Required: Yes

Type: String

Allowed values: EBS_SNAPSHOT | EC2_IMAGE

Update requires: Replacement

RetentionPeriod

Information about the retention period for which the retention rule is to retain resources.

Required: Yes

Type: RetentionPeriod

Update requires: No interruption

Status

The state of the retention rule. Only retention rules that are in the available state retain resources.

Required: No

Type: String

Pattern: pending|available

Update requires: No interruption

Tags

Information about the tags to assign to the retention rule.

Required: No

Type: Array of Tag

Maximum: 200

Update requires: No interruption

Return values

Ref

When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the ID of the retention rule.

Fn::GetAtt

The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.

Arn

The Amazon Resource Name (ARN) of the retention rule.

Identifier

The unique ID of the retention rule.

LockState

[Region-level retention rules only] The lock state for the retention rule.

  • locked - The retention rule is locked and can't be modified or deleted.

  • pending_unlock - The retention rule has been unlocked but it is still within the unlock delay period. The retention rule can be modified or deleted only after the unlock delay period has expired.

  • unlocked - The retention rule is unlocked and it can be modified or deleted by any user with the required permissions.

  • null - The retention rule has never been locked. Once a retention rule has been locked, it can transition between the locked and unlocked states only; it can never transition back to null.

Examples

Create a retention rule

This example creates a retention rule that retains EBS snapshots for 7 days after deletion.

JSON

"MyRule" : {
  "Type": "AWS::Rbin::Rule",
  "Properties": {
    "Description": "my new retention rule",
    "LockConfiguration": {
      "UnlockDelayUnit": "DAYS", 
      "UnlockDelayValue": 15
    },
    "ResourceTags": [{
      "Key": "environment", 
      "Value": "testing"
    }],
    "ResourceType": "EBS_SNAPSHOT",
    "RetentionPeriod": {
      "RetentionPeriodUnit": "DAYS", 
      "RetentionPeriodValue": 7
    },
    "Status": "available",
    "Tags": [{
      "Key": "purpose", 
      "Value": "testing"
    }]
  }
}

YAML

MyRule:
  Type: AWS::Rbin::Rule
  Properties:
    Description: my new retention rule
    LockConfiguration: 
      UnlockDelayUnit: DAYS
      UnlockDelayValue: 15
    ResourceTags: 
    - Key: environment
      Value: testing
    ResourceType: EBS_SNAPSHOT
    RetentionPeriod: 
      RetentionPeriodUnit: DAYS
      RetentionPeriodValue: 7
    Status: available
    Tags: 
    - Key: purpose
      Value: testing