CCM-12082: Adding vault lock configuration to standardise min/max retention periods

Author: sidnhs

infrastructure/modules/aws-backup-source/backup_framework_dynamodb.tf

@@ -44,7 +44,7 @@ resource "aws_backup_framework" "dynamodb" {
 
     input_parameter {
       name  = "requiredRetentionDays"
-      value = "35"
+      value = "31"
     }
   }
 
@@ -65,7 +65,7 @@ resource "aws_backup_framework" "dynamodb" {
 
     input_parameter {
       name  = "requiredRetentionDays"
-      value = "35"
+      value = "31"
     }
 
     input_parameter {

infrastructure/modules/aws-backup-source/backup_framework_s3.tf

@@ -44,7 +44,7 @@ resource "aws_backup_framework" "s3" {
 
     input_parameter {
       name  = "requiredRetentionDays"
-      value = "35"
+      value = "31"
     }
   }
 
@@ -65,7 +65,7 @@ resource "aws_backup_framework" "s3" {
 
     input_parameter {
       name  = "requiredRetentionDays"
-      value = "35"
+      value = "31"
     }
 
     input_parameter {

infrastructure/modules/aws-backup-source/backup_vault_lock_configuration.tf

@@ -0,0 +1,6 @@
+resource "aws_backup_vault_lock_configuration" "main" {
+  backup_vault_name   = aws_backup_vault.main.name
+  changeable_for_days = 30
+  max_retention_days  = var.vault_max_retention_days
+  min_retention_days  = var.vault_min_retention_days
+}

infrastructure/modules/aws-backup-source/variables.tf

@@ -221,3 +221,15 @@ variable "backup_plan_config_dynamodb" {
     ]
   }
 }
+
+variable "vault_max_retention_days" {
+  type        = number
+  description = "Maximum retention days for the vault lock"
+  default     = 35
+}
+
+variable "vault_min_retention_days" {
+  type        = number
+  description = "Minimum retention days for the vault lock"
+  default     = 7
+}