---
title: Object Lock
---

## Object Lock

EOS supports **Object Locking**, which enforces **write-once-read-many (WORM)** policies. Locked objects cannot be overwritten or deleted until their retention period expires. Object Lock supports two modes: **Governance Lock** and **Legal Hold**.

:::info
Object Lock **can only be enabled at the time of bucket creation**. It cannot be enabled on an existing bucket.
:::

---

### Enable Object Lock

When creating a bucket:

1. Check the **Enable Object Lock** option on the bucket creation form.
2. Once the bucket is created, navigate to the **Object Lock** tab.
3. Set the desired **retention period** and select **Governance** as the lock mode.
4. Save the configuration.

All objects uploaded to this bucket will automatically inherit the configured retention policy.

---

### Governance Lock

When Governance Lock is active, every object uploaded inherits the configured retention period. The lock persists on individual objects even if you later disable Governance Lock at the bucket level.

To remove Governance Lock from a specific object version:

1. Go to the **Objects** tab of the bucket.
2. Click **View all versions**.
3. Open the **three-dot menu** next to the version you want to modify.
4. Select **Lock Settings**.
5. Choose the option to remove the **Governance Lock** and save.

---

### Legal Hold

Legal Hold is a stricter, indefinite lock. It cannot be removed by retention period expiry — it must be explicitly cleared.

To enable or disable Legal Hold on a specific object version:

1. Go to the **Objects** tab.
2. Click **See all versions**.
3. Open the **three-dot menu** for the object version.
4. Click **Lock Settings**.
5. Toggle **Enable Legal Hold** on or off.

---

### Deleting Buckets with Locked Objects

A bucket containing objects under Governance Lock or Legal Hold cannot be fully deleted until all locks are cleared.

:::tip Reminder
Always verify object lock status before attempting to delete a bucket.
:::


---