Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ Cloud Backup and Recovery/ Backup Locked for CBR Vaults
Updated on 2025-08-25 GMT+08:00
View PDF
Share

Backup Locked for CBR Vaults

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

cbr-vault-locked-enabled

Identifier

Backup Locked for CBR Vaults

Description

If backup locking is not enabled for CBR vaults, the check result is non-compliant.

Tag

cbr

Trigger Type

Configuration change

Filter Type

cbr.vault

Rule Parameters

None

Application Scenarios

You can enable backup locking for vaults to prevent backups from being deleted by mistake or maliciously.

Once enabled, all backups in the vault enter the write once, read many (WORM) state. No one can delete the backups in their retention periods.

Solution

Enable backup locking.

Rule Logic

  • If backup locking is enabled for CBR vaults, the check result is compliant.
  • If backup locking is not enabled for CBR vaults, the check result is non-compliant.