Simple definition
Backup retention lock enforces a minimum protection period during which backup data cannot be removed.
Purpose and use
A retention lock enforces a period during which ordinary operations cannot delete the protected data.
How does it work?
On compatible object storage, protection can apply to a particular version with a retain-until date. Governance and compliance modes offer different bypass guarantees.
Example and verification
Before broad rollout, verify the actual mode, applied date and how new versions receive protection.
Points to watch
A long period can tie up storage capacity. Conversely, a default policy that does not apply to existing data cannot protect it retroactively by intention alone.
In short
Align the lock with required retention, available capacity and the provider's actual protection guarantees.