Understanding Amazon EBS Snapshot Lock

To improve adherence to your data preservation standards, you can now lock certain Amazon Elastic Block Store (Amazon EBS) snapshots

[{"selector":"#anim-5b15680e-9586-4869-bd50-587ab3519c6b [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.302419265654365%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-495c5007-ff97-4c54-9312-78a0a72aa5dc","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-d79f5898-eb4b-466e-99c8-5c8e3413ddc2","keyframes":{"transform":["translate3d(0px, -126.06736%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

EBS snapshots are used by AWS customers for data migration, disaster recovery, backups, and compliance In addition to making sure that the snapshots are indeed Write Once Read Many (WORM), customers in the financial services and healthcare industries

[{"selector":"#anim-5b831916-4da4-47b1-8727-1bd4faf20235 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-36.02594331143238%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-cd27e3da-80f3-4773-a3e4-1e756fcea2cd","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4ccaa48f-826a-4435-8eeb-3aa51ee3fa1c","keyframes":{"transform":["translate3d(0px, -112.91342%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

A lock length of one day to about 100 years can be used to lock both new and old EBS snapshots The snapshot cannot be erased and is locked for the allotted amount of time

[{"selector":"#anim-cd6483e2-041e-4e9e-a1d0-f3f2060d623d [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.302419265654365%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-af6aeb84-fcee-448d-b1bc-88f0212bd472","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-0dbe17d5-9ac5-4df8-97b4-a9c166175b28","keyframes":{"transform":["translate3d(0px, -116.57813%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

This feature allows you to change the parameters of an already-locked snapshot or lock it in governance or compliance mode

[{"selector":"#anim-934170d8-d091-4fe3-918f-cfa515f357d8 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.34967836769406%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-6dbb85ba-a943-4e5b-826c-25e57f0777e4","keyframes":{"transform":["translate3d(124.54873%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-1aefa2f0-68d8-4de9-9552-610b83ccf3a2","keyframes":{"transform":["rotateZ(180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}]

Open a snapshot that is in compliance mode or in governance mode while it is still inside the cooling-off period by using the UnlockSnapshot function

[{"selector":"#anim-ad0cf512-c4d1-4adf-81fd-3cf2dac9a73e [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.34967836769406%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-9eed7ea3-ea72-4c8c-a756-668b39d0d93e","keyframes":{"transform":["translate3d(-125.64102%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-d8b670c6-c4a8-49c8-8369-ef18f4864c96","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}]

Get details about the lock status of AWS snapshots with the possibility to filter based on the lock’s current condition by using the DescribeLockedSnapshots function

[{"selector":"#anim-4619717d-c68b-4276-a303-cf21d64d0b11 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(31.35190206075711%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-44f91b2e-3ea4-4019-ae59-c1d89e8c5500","keyframes":{"transform":["rotate(-540deg) scale(0.1)","none"],"opacity":[0,1]},"delay":0,"duration":1000,"fill":"both","iterations":1}]

This tool autonomously controls the retention of the snapshots it generates It is not advised that you lock them

[{"selector":"#anim-690c8f48-248a-448a-b8d5-e8f372d23141 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.302419265654365%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-73a46e33-e682-4ddb-a6ae-fd83b652ef78","keyframes":{"transform":["translate3d(129.11879%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-7e7d0146-67c9-4de8-861f-fd75e3cfc2f7","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-79df8660-8d53-4c87-b82e-ced4f933d13d","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

You must ensure that the key will stay valid for the duration of the snapshot if you are encrypting your EBS volumes and snapshots with customer-managed AWS Key Management Service (AWS KMS) keys For more details visit govindhtech.com

[{"selector":"#anim-9a3e4474-c037-4420-808f-4749f9afd0f5 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.34967836769406%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}]