backup:PutBackupVaultLockConfiguration is a Write access-level action in the backup service. Grants permission to add a lock configuration to the backup vault
ARNs that backup:PutBackupVaultLockConfiguration can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants backup:PutBackupVaultLockConfiguration.
Filters access by the value of the ChangeableForDays parameter
Filters access by the value of the MaxRetentionDays parameter
Filters access by the value of the MinRetentionDays parameter
Filters access by the tags associated with the resource
A minimal policy that allows backup:PutBackupVaultLockConfiguration. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBackupPutBackupVaultLockConfiguration",
"Effect": "Allow",
"Action": "backup:PutBackupVaultLockConfiguration",
"Resource": "*"
}
]
}