lockMode

The mode in which to lock the snapshot. Specify one of the following:

• governance - Locks the snapshot in governance mode. Snapshots locked in governance mode can't be deleted until one of the following conditions are met:

• The lock duration expires.

• The snapshot is unlocked by a user with the appropriate permissions. Users with the appropriate IAM permissions can unlock the snapshot, increase or decrease the lock duration, and change the lock mode to compliance at any time.If you lock a snapshot in governance mode, omit ** CoolOffPeriod**.

• compliance - Locks the snapshot in compliance mode. Snapshots locked in compliance mode can't be unlocked by any user. They can be deleted only after the lock duration expires. Users can't decrease the lock duration or change the lock mode to governance. However, users with appropriate IAM permissions can increase the lock duration at any time.If you lock a snapshot in compliance mode, you can optionally specify CoolOffPeriod.