AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::Backup::BackupVault

CfnBackupVault

Creates a logical container where backups are stored. A `CreateBackupVault` request includes a name, optionally one or more resource tags, an encryption key, and a request ID. Do not include sensitive data, such as passport numbers, in the name of a backup vault. For a sample CloudFormation template, see the [AWS Backup Developer Guide](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html#assigning-resources-cfn) .

Import

import { CfnBackupVault } from 'aws-cdk-lib/aws-backup';

Or use the module namespace:

import * as backup from 'aws-cdk-lib/aws-backup';
// backup.CfnBackupVault

Properties

Configuration passed to the constructor as CfnBackupVaultProps.

backupVaultNameRequired
string

The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created.

accessPolicyOptional
any

A resource-based policy that is used to manage access permissions on the target backup vault.

backupVaultTagsOptional
{ [key: string]: string }

The tags to assign to the backup vault.

encryptionKeyArnOptional
string | IKeyRef

A server-side encryption key you can specify to encrypt your backups from services that support full AWS Backup management; for example, `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` . If you specify a key, you must specify its ARN, not its alias. If you do not specify a key, AWS Backup creates a KMS key for you by default. To learn which AWS Backup services support full AWS Backup management and how AWS Backup handles encryption for backups from services that do not yet support full AWS Backup , see [Encryption for backups in AWS Backup](https://docs.aws.amazon.com/aws-backup/latest/devguide/encryption.html)

lockConfigurationOptional
IResolvable | LockConfigurationTypeProperty

Configuration for [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html) .

notificationsOptional
IResolvable | NotificationObjectTypeProperty

The SNS event notifications for the specified backup vault.

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter