Skip to main content

Update S3 Object Lock default retention

Contributors netapp-madkat netapp-perveilerk ssantho3

If you enabled S3 Object Lock when you created the bucket, you can edit the bucket to change the default retention settings. You can enable (or disable) default retention and set a default retention mode and retention period.

Before you begin
  1. Select View buckets from the dashboard, or select STORAGE (S3) > Buckets.

  2. Select the bucket name from the table.

    The bucket details page appears.

  3. From the Bucket options tab, select the S3 Object Lock accordion.

  4. Optionally, enable or disable Default retention for this bucket.

    Changes to this setting don't apply to objects already in the bucket or to any objects that might have their own retention periods.

  5. If Default retention is enabled, specify a Default retention mode for the bucket.

    Default retention mode Description


    • The object can't be deleted until its retain-until-date is reached.

    • The object's retain-until-date can be increased, but it can't be decreased.

    • The object's retain-until-date can't be removed until that date is reached.


    • Users with the s3:BypassGovernanceRetention permission can use the x-amz-bypass-governance-retention: true request header to bypass retention settings.

    • These users can delete an object version before its retain-until-date is reached.

    • These users can increase, decrease, or remove an object's retain-until-date.

  6. If Default retention is enabled, specify the Default retention period for the bucket.

    The Default retention period indicates how long new objects added to this bucket should be retained, starting from the time they are ingested. Specify a value between 1 and 36,500 days or between 1 and 100 years, inclusive.

  7. Select Save changes.