Merge pull request #5586 from nhsuk/MAV-1866_lock_backup_vault

TheOneFromNorway · web-flow · commit 64ffa45bdd1c · 2025-12-19T19:24:44.000Z
Enable compliance mode
diff --git a/terraform/backup/destination/main.tf b/terraform/backup/destination/main.tf
@@ -81,7 +81,7 @@ module "destination" {
   source_account_id             = var.source_account_id
   kms_key                       = aws_kms_key.destination_backup_key.arn
   enable_vault_protection       = true
-  vault_lock_type               = "governance"
+  vault_lock_type               = "compliance"
   changeable_for_days           = 14
   vault_lock_min_retention_days = 7
 }

Original file line number	Diff line number	Diff line change
`@@ -81,7 +81,7 @@ module "destination" {`
`81`	`81`	`source_account_id = var.source_account_id`
`82`	`82`	`kms_key = aws_kms_key.destination_backup_key.arn`
`83`	`83`	`enable_vault_protection = true`
`84`		`- vault_lock_type = "governance"`
	`84`	`+ vault_lock_type = "compliance"`
`85`	`85`	`changeable_for_days = 14`
`86`	`86`	`vault_lock_min_retention_days = 7`
`87`	`87`	`}`