Skip to content
v2.275.0

CfnBackupVaultProps Struct ​

Properties for defining a CfnBackupVault.

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_backup as backup } from 'aws-cdk-lib';

declare const accessPolicy: any;
const cfnBackupVaultProps: backup.CfnBackupVaultProps = {
  backupVaultName: 'backupVaultName',

  // the properties below are optional
  accessPolicy: accessPolicy,
  backupVaultTags: {
    backupVaultTagsKey: 'backupVaultTags',
  },
  encryptionKeyArn: 'encryptionKeyArn',
  lockConfiguration: {
    minRetentionDays: 123,

    // the properties below are optional
    changeableForDays: 123,
    maxRetentionDays: 123,
  },
  notifications: {
    backupVaultEvents: ['backupVaultEvents'],
    snsTopicArn: 'snsTopicArn',
  },
};

Properties ​

accessPolicyoptionalanyaccess_policyoptionalAnyaccessPolicyoptionalObjectAccessPolicyoptionalobjectAccessPolicyoptionalinterface{}#
A resource-based policy that is used to manage access permissions on the target backup vault.
backupVaultNamestringbackup_vault_namestrbackupVaultNameStringBackupVaultNamestringBackupVaultName*stringrequired#
The name of a logical container where backups are stored.

Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created.

backupVaultTagsoptional{ [key: string]: string }backup_vault_tagsoptionaltyping.Mapping[str, str]backupVaultTagsoptionalMap<String, String>BackupVaultTagsoptionalIDictionary<string, string>BackupVaultTagsoptional*map[string]*string#
The tags to assign to the backup vault.
encryptionKeyArnoptionalstring | IKeyRefencryption_key_arnoptionaltyping.Union[str, IKeyRef]encryptionKeyArnoptionalStringEncryptionKeyArnoptionalstringEncryptionKeyArnoptionalinterface{}#
A server-side encryption key you can specify to encrypt your backups from services that support full AWS Backup management;
notes

for example, arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab . If you specify a key, you must specify its ARN, not its alias. If you do not specify a key, AWS Backup creates a KMS key for you by default.

To learn which AWS Backup services support full AWS Backup management and how AWS Backup handles encryption for backups from services that do not yet support full AWS Backup , see Encryption for backups in AWS Backup

lockConfigurationoptionalIResolvable | CfnBackupVault.LockConfigurationTypePropertylock_configurationoptionaltyping.Union[IResolvable, LockConfigurationTypeProperty]lockConfigurationoptionalIResolvableLockConfigurationoptionalIResolvableLockConfigurationoptionalinterface{}#
Configuration for [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html) .
notificationsoptionalIResolvable | CfnBackupVault.NotificationObjectTypePropertynotificationsoptionaltyping.Union[IResolvable, NotificationObjectTypeProperty]notificationsoptionalIResolvableNotificationsoptionalIResolvableNotificationsoptionalinterface{}#
The SNS event notifications for the specified backup vault.