Locking a Replication

Lock a File Storage replication resource to prevent updates, moves, and deletions of the resource. Locks help protect resources against tampering.

Important

A lock on a replication resource doesn't prevent the replication from proceeding. The replication process continues even if the resource is locked.

OCI resource locks include the following types:

  • Delete lock: Prevents deletion of the locked resource.
  • Full lock: Prevents update, move, and deletion of the locked resource.

You can only add or remove one lock type at a time, but both locks can be applied to a resource. For example, you might initially apply a delete lock, but choose to apply a full lock at a later time.

The user who places a lock is the lock owner. Any authorized user with lock privilege or users with global manage permission of the tenancy has the authorization to create and remove any lock in the tenancy. You can override or remove locks.

Required IAM Policy

To create locks, in addition to permissions to manage replications, you need permissions to manage locks.

To lock a replication, you must have RESOURCE_LOCK_ADD permissions.