CfnLogicallyAirGappedBackupVaultProps

class aws_cdk.aws_backup.CfnLogicallyAirGappedBackupVaultProps(*, backup_vault_name, max_retention_days, min_retention_days, access_policy=None, backup_vault_tags=None, encryption_key_arn=None, mpa_approval_team_arn=None, notifications=None)

Bases: object

Properties for defining a CfnLogicallyAirGappedBackupVault.

Parameters:

backup_vault_name (str) – The name of a logical container where backups are stored. Logically air-gapped backup vaults are identified by names that are unique to the account used to create them and the Region where they are created.
max_retention_days (Union[int, float]) – The maximum retention period that the vault retains its recovery points.
min_retention_days (Union[int, float]) – This setting specifies the minimum retention period that the vault retains its recovery points. The minimum value accepted is 7 days.
access_policy (Any) – The backup vault access policy document in JSON format.
backup_vault_tags (Optional[Mapping[str, str]]) – The tags to assign to the vault.
encryption_key_arn (Optional[str]) – The server-side encryption key that is used to protect your backups; for example, arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab . If this field is left blank, AWS Backup will create an AWS owned key to be used to encrypt the content of the logically air-gapped vault. The ARN of this created key will be available as Fn::GetAtt output.
mpa_approval_team_arn (Optional[str]) – The Amazon Resource Name (ARN) of the MPA approval team to associate with the backup vault. This cannot be changed after it is set from the CloudFormation template.
notifications (Union[IResolvable, NotificationObjectTypeProperty, Dict[str, Any], None]) – Returns event notifications for the specified backup vault.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-logicallyairgappedbackupvault.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk import aws_backup as backup

# access_policy: Any

cfn_logically_air_gapped_backup_vault_props = backup.CfnLogicallyAirGappedBackupVaultProps(
    backup_vault_name="backupVaultName",
    max_retention_days=123,
    min_retention_days=123,

    # the properties below are optional
    access_policy=access_policy,
    backup_vault_tags={
        "backup_vault_tags_key": "backupVaultTags"
    },
    encryption_key_arn="encryptionKeyArn",
    mpa_approval_team_arn="mpaApprovalTeamArn",
    notifications=backup.CfnLogicallyAirGappedBackupVault.NotificationObjectTypeProperty(
        backup_vault_events=["backupVaultEvents"],
        sns_topic_arn="snsTopicArn"
    )
)

Attributes

access_policy

The backup vault access policy document in JSON format.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-logicallyairgappedbackupvault.html#cfn-backup-logicallyairgappedbackupvault-accesspolicy

backup_vault_name

The name of a logical container where backups are stored.

Logically air-gapped backup vaults are identified by names that are unique to the account used to create them and the Region where they are created.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-logicallyairgappedbackupvault.html#cfn-backup-logicallyairgappedbackupvault-backupvaultname

backup_vault_tags

The tags to assign to the vault.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-logicallyairgappedbackupvault.html#cfn-backup-logicallyairgappedbackupvault-backupvaulttags

encryption_key_arn

The server-side encryption key that is used to protect your backups; for example, arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab .

If this field is left blank, AWS Backup will create an AWS owned key to be used to encrypt the content of the logically air-gapped vault. The ARN of this created key will be available as Fn::GetAtt output.