file-share/terraform/dlm.tf
Adam Moussa 1a3c3d72a2
fix(infra): run nightly snapshots as a stack-local DLM role (PLAT-77)
The lifecycle policy assumed a service-linked role AWS does not provide, so it stayed in ERROR and never snapshotted the data volume.
2026-10-01 13:45:29 -04:00

29 lines
557 B
HCL

resource "aws_dlm_lifecycle_policy" "nightly" {
description = "Nightly EBS snapshots for file share"
execution_role_arn = aws_iam_role.dlm.arn
state = "ENABLED"
policy_details {
resource_types = ["VOLUME"]
target_tags = {
"file-share-backup" = "true"
}
schedule {
name = "file-share-nightly"
create_rule {
interval = 24
interval_unit = "HOURS"
times = ["06:00"]
}
retain_rule {
count = 30
}
copy_tags = true
}
}
}