Skip to main content

Workflow for S3 Object Lock

Contributors netapp-lhalbert
PDFs

As a grid administrator, you must coordinate closely with tenant users to ensure that the objects are protected in a manner that satisfies their retention requirements.

The workflow diagram shows the high-level steps for using S3 Object Lock. These steps are performed by the grid administrator and by tenant users.

S3 Object Lock workflow

Grid admin tasks

As the workflow diagram shows, a grid administrator must perform two high-level tasks before S3 tenant users can use S3 Object Lock:

  1. Create at least one compliant ILM rule and make that rule the default rule in the active ILM policy.

  2. Enable the global S3 Object Lock setting for the entire StorageGRID system.

Tenant user tasks

After the global S3 Object Lock setting has been enabled, tenants can perform these tasks:

  1. Create buckets that have S3 Object Lock enabled.

  2. Add objects to those buckets and specify object-level retention periods and legal hold settings.

  3. As required, update a retention period or change the legal hold setting for an individual object.

Related information

Use a tenant account

Use S3