file-share/terraform/dlm.tf
Adam Moussa cf5efb06ec
fix(infra): keep the file share off the public internet (PLAT-77)
The instance has no public IP. Office routes use the syslog VPN gateway and other egress uses a NAT gateway. DLM targets the tagged data volume, and replacement detaches stop the instance first.
2026-09-28 16:51:29 -04:00

29 lines
563 B
HCL

resource "aws_dlm_lifecycle_policy" "nightly" {
description = "Nightly EBS snapshots for file share"
execution_role_arn = local.dlm_service_role_arn
state = "ENABLED"
policy_details {
resource_types = ["VOLUME"]
target_tags = {
"file-share-backup" = "true"
}
schedule {
name = "file-share-nightly"
create_rule {
interval = 24
interval_unit = "HOURS"
times = ["06:00"]
}
retain_rule {
count = 30
}
copy_tags = true
}
}
}