Posted On: Jul 13, 2023

Amazon FSx for NetApp ONTAP now supports SnapLock, an ONTAP feature that prevents data from being modified or deleted for a specified retention period by transitioning files to a write once, read many (WORM) state. FSx for ONTAP is the first and only fully managed file storage service in the cloud offering WORM protection. You can use SnapLock to meet regulatory compliance, protect business-critical data from ransomware, and prevent accidental or malicious attempts at alteration and deletion of data.

Amazon FSx supports both modes of retention with SnapLock: Compliance and Enterprise. With SnapLock Compliance, a file once transitioned to WORM cannot be modified or deleted by any user before its retention period expires. You can use SnapLock Compliance to address Government or industry-specific mandates such as SEC Rule 17a-4(f). You can also use SnapLock Compliance to provide enhanced protection against ransomware by ensuring strict immutability to prevent unauthorized alteration or deletion. With SnapLock Enterprise, you can protect files against deletion from most users, but retain the flexibility for authorized users to delete files if necessary. You can use SnapLock Enterprise to meet internal compliance, or to test retention settings before using SnapLock Compliance.

Starting today, you can create SnapLock volumes on new file systems in all AWS Regions where FSx for ONTAP is available. Existing file systems will get SnapLock support during an upcoming weekly maintenance window. To learn more, please visit the FSx for ONTAP product page, the FSx for ONTAP documentation, and the AWS News blog.