AWS Security Cookbook

How to do it...

We can create a Vault Lock as follows:

1. Go to the Glacier service in the console.
2. Select our vault.
3. Go to the Vault Lock tab.
4. Click Create Vault Lock policy.
5. Add the following policy statement:

{     "Version":"2012-10-17",     "Statement":[      {         "Sid": "deny-delete-if-archive-age-less-than-year",         "Principal": "*",         "Effect": "Deny",         "Action": "glacier:DeleteArchive",         "Resource": [            "arn:aws:glacier:us-east-1:135301570106:vaults/mybackupvault"         ],         "Condition": {             "NumericLessThan" : {                  "glacier:ArchiveAgeInDays" : "365"             }         }      }   ]}

Replace my account ID of 135301570106 and the vault name of mybackupvault with your account ID and vault name. We can also click on Add a permission and generate the policy statement.

6. Click Initiate Vault Lock ...