SnaplockConfigurationProperty Struct
Specifies the SnapLock configuration for an FSx for ONTAP SnapLock volume.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_fsx as fsx } from 'aws-cdk-lib';
const snaplockConfigurationProperty: fsx.CfnVolume.SnaplockConfigurationProperty = {
snaplockType: 'snaplockType',
// the properties below are optional
auditLogVolume: 'auditLogVolume',
autocommitPeriod: {
type: 'type',
// the properties below are optional
value: 123,
},
privilegedDelete: 'privilegedDelete',
retentionPeriod: {
defaultRetention: {
type: 'type',
// the properties below are optional
value: 123,
},
maximumRetention: {
type: 'type',
// the properties below are optional
value: 123,
},
minimumRetention: {
type: 'type',
// the properties below are optional
value: 123,
},
},
volumeAppendModeEnabled: 'volumeAppendModeEnabled',
};
Properties
auditLogVolumeoptionalstringaudit_log_volumeoptionalstrauditLogVolumeoptionalStringAuditLogVolumeoptionalstringAuditLogVolumeoptional*string#notes
The default value is false . If you set AuditLogVolume to true , the SnapLock volume is created as an audit log volume. The minimum retention period for an audit log volume is six months.
For more information, see SnapLock audit log volumes .
autocommitPeriodoptionalIResolvable | CfnVolume.AutocommitPeriodPropertyautocommit_periodoptionaltyping.Union[IResolvable, AutocommitPeriodProperty]autocommitPeriodoptionalIResolvableAutocommitPeriodoptionalIResolvableAutocommitPeriodoptionalinterface{}#privilegedDeleteoptionalstringprivileged_deleteoptionalstrprivilegedDeleteoptionalStringPrivilegedDeleteoptionalstringPrivilegedDeleteoptional*string#notes
Enabling privileged delete allows SnapLock administrators to delete write once, read many (WORM) files even if they have active retention periods. PERMANENTLY_DISABLED is a terminal state. If privileged delete is permanently disabled on a SnapLock volume, you can't re-enable it. The default value is DISABLED .
For more information, see Privileged delete .
retentionPeriodoptionalIResolvable | CfnVolume.SnaplockRetentionPeriodPropertyretention_periodoptionaltyping.Union[IResolvable, SnaplockRetentionPeriodProperty]retentionPeriodoptionalIResolvableRetentionPeriodoptionalIResolvableRetentionPeriodoptionalinterface{}#notes
After it is set, it can't be changed. You can choose one of the following retention modes:
COMPLIANCE: Files transitioned to write once, read many (WORM) on a Compliance volume can't be deleted until their retention periods expire. This retention mode is used to address government or industry-specific mandates or to protect against ransomware attacks. For more information, see SnapLock Compliance .ENTERPRISE: Files transitioned to WORM on an Enterprise volume can be deleted by authorized users before their retention periods expire using privileged delete. This retention mode is used to advance an organization's data integrity and internal compliance or to test retention settings before using SnapLock Compliance. For more information, see SnapLock Enterprise .
volumeAppendModeEnabledoptionalstringvolume_append_mode_enabledoptionalstrvolumeAppendModeEnabledoptionalStringVolumeAppendModeEnabledoptionalstringVolumeAppendModeEnabledoptional*string#notes
Volume-append mode allows you to create WORM-appendable files and write data to them incrementally. The default value is false .
For more information, see Volume-append mode .