Enabling Versioning for Object Locking

Content versioning is needed to support the immutability option in Veeam Backup & Replication. It is enabled for the bucket by selecting Enabled from the drop-down menu.

By default, the owner of a bucket has all permissions. Other users can be assigned permissions in the domain, tenant, or root policies. They must be allowed for actions:

ListDomain
ListBucket
PutBucketObjectLocking
GetBucketObjectLocking
GetObjectRetention
PutObjectRetention
GetObjectLegalHold
PutObjectLegalHold
GetObject
PutObject
DeleteObject

Enable Object Locking on Bucket

Refer to the following steps to apply Object Locking to an existing bucket:

Important

The bucket must have policy versioning enabled. The command to enable policy versioning on a bucket is:

curl -i --location-trusted -XPUT --post301--data-binary '' -H "Policy-Versioning: enabled"
"http://<hostname>/<bucket-name>?domain=<domain-name>&replicate=immediate"

See Enabling Policy Versioning for the Swarm Cluster to enable policy versioning from the UI.

Search and select the target bucket name.
Click Settings > Properties.
Select the checkbox for Enable Object Locking.

Do Not set the default duration.

Click Save.
The bucket has Object Locking enabled once the configurations are saved. Any objects written to that bucket have the defined duration with the selected mode automatically applied, unless different values are provided at the time of write. A gray lock icon next to the bucket name represents that the bucket has Object Locking enabled.

Note

Object Locking cannot be disabled once enabled for a bucket. The retention mode and duration can be updated.