Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. NetBackup™ Deduplication Guide
  5. S3 Interface for MSDP
  7. S3 Object Lock In Flex WORM
NetBackup™ Deduplication Guide

S3 Object Lock In Flex WORM

S3 Object Lock lets you store the objects using a write once read many (WORM) model. Currently, the feature works only in Flex WORM and the legal hold APIs are not supported.

We recommend that you store all the data into the object-lock-enabled buckets. The setting for S3 Object Lock in Flex WORM and MSDP in Flex WORM are same by default. However, the format of object lock retention is different. For example, "Days" or "Years" in S3 bucket object lock retention is different from the MSDP WORM storage server, which uses "Hours" to "Years". We recommend that you enlarge the interval range to minimize the effects on the backup retention.

If the MSDP WORM settings are updated, you must restart s3srv and the MSDP service. After the WORM settings are updated, the retention settings of the existing objects stay unchanged and only the newly created objects are affected.

Note:

The Governance mode in Flex WORM S3 object lock is Enterprise mode in the MSDP LSU on Flex WORM. The Compliance mode in Flex WORM S3 object lock is Compliance mode in the MSDP LSU on Flex WORM.

You can use the following S3 APIs for Object Lock in Flex WORM:

  • Create Bucket

    See CreateBucket .

  • Put Object

    See PutObject.

  • Copy Object

    See Copy Object.

  • Get Object

    See GetObject.

  • Head Object

    See HeadObject.

  • Delete Object

    See DeleteObject.

  • Delete Objects

    See DeleteObjects.

  • Create Multipart Upload

    See CreateMultipartUpload.

  • Put Object Retention (Flex WORM only)

    See Put Object Retention (Flex WORM only).

  • Get Object Retention (Flex WORM only)

    See Get Object Retention (Flex WORM only).

  • Put Object Lock Configuration (Flex WORM only)

    See Put Object Lock Configuration (Flex WORM only).

  • GET Object Lock Configuration (Flex WORM only)

    See Get Object Lock Configuration (Flex WORM only).

Feedback

Was this page helpful?
Previous

IAM policy document syntax

Next

S3 APIs for S3 interface for MSDP

Feedback

Was this page helpful?