# LockConfiguration

Configuration for AWS Backup Vault Lock.

- Source: [`aws-backup/lib/vault.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-backup/lib/vault.ts#L161)
- Type last changed: v2.32.0 · 14 Jul 2022

## Example

```ts
new backup.BackupVault(this, 'Vault', {
  lockConfiguration: {
    minRetention: Duration.days(30),
  },
});
```

## Properties

- `changeableFor`: [Duration](/cdk/api/v2/docs/aws-cdk-lib.Duration.html) — The duration before the lock date.

  **Default:** Vault Lock can be deleted or changed at any time

  AWS Backup enforces a 72-hour cooling-off period before Vault Lock takes
  effect and becomes immutable.

  Before the lock date, you can delete Vault Lock from the vault or change
  the Vault Lock configuration. On and after the lock date, the Vault Lock
  becomes immutable and cannot be changed or deleted.

- `maxRetention`: [Duration](/cdk/api/v2/docs/aws-cdk-lib.Duration.html) — The maximum retention period that the vault retains its recovery points.

  **Default:** Vault Lock does not enforce a maximum retention period

  If this parameter is specified, any backup or copy job to the vault must
  have a lifecycle policy with a retention period equal to or shorter than
  the maximum retention period. If the job's retention period is longer than
  that maximum retention period, then the vault fails the backup or copy job,
  and you should either modify your lifecycle settings or use a different
  vault. Recovery points already saved in the vault prior to Vault Lock are
  not affected.

- `minRetention`: [Duration](/cdk/api/v2/docs/aws-cdk-lib.Duration.html) (required) — The minimum retention period that the vault retains its recovery points.

  If this parameter is specified, any backup or copy job to the vault must
  have a lifecycle policy with a retention period equal to or longer than
  the minimum retention period. If the job's retention period is shorter than
  that minimum retention period, then the vault fails that backup or copy job,
  and you should either modify your lifecycle settings or use a different
  vault. Recovery points already saved in the vault prior to Vault Lock are
  not affected.