mirror of https://github.com/minio/minio.git
1.7 KiB
1.7 KiB
Object Lock and Immutablity
MinIO server allows to set bucket level WORM which makes objects in the bucket immutable i.e. delete and overwrite are not allowed till stipulated time specified in the bucket's object lock configuration.
Get Started
1. Prerequisites
Install MinIO - MinIO Quickstart Guide.
2. Set per bucket WORM
WORM on a bucket is enabled by setting object lock configuration. This configuration is applied to existing and new objects in the bucket. Below is an example sets Governance
mode and one day retention time from object creation time of all objects in mybucket
.
$ awscli s3api put-object-lock-configuration --bucket mybucket --object-lock-configuration 'ObjectLockEnabled=\"Enabled\",Rule={DefaultRetention={Mode=\"GOVERNANCE\",Days=1}}'
3. Note
- When global WORM is enabled by
MINIO_WORM
environment variable orworm
field in configuration file supersedes bucket level WORM andPUT object lock configuration
REST API is disabled. - Currently Governance mode is treated as Compliance mode.
- Once object lock configuration is set to a bucket, existing and new objects are put in WORM mode.