Skip to content

docs(r2): clarify bucket lock enforcement boundary #33572

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
krys-cf wants to merge 2 commits into
base: production
Choose a base branch
from
Open

docs(r2): clarify bucket lock enforcement boundary #33572

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
067cbd8
docs(r2): clarify bucket lock enforcement boundary
Sep 21, 2026
dd8f33e
docs(r2): use active voice for lock enforcement
Sep 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion src/content/docs/r2/buckets/bucket-locks.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -148,6 +148,7 @@ If multiple rules apply to the same prefix or object key, the strictest (longest
## Notes

- Rules without prefix apply to all objects in the bucket.
- Rules apply to both new and existing objects in the bucket.
- Bucket locks protect both existing objects and objects created after the rule is enabled. They do not prevent new object creation.
- A successful rule update is the enforcement boundary. R2 denies mutations to existing keys if they commit after the update succeeds. This includes overwrites, deletes, copies, multipart completions, and lifecycle deletions that began earlier.
- Bucket lock rules take precedence over [lifecycle rules](/r2/buckets/object-lifecycles/). For example, if a lifecycle rule attempts to delete an object at 30 days but a bucket lock rule requires it be retained for 90 days, the object will not be deleted until the 90-day requirement is met.
- A bucket cannot be emptied while any bucket lock rules are configured. Remove all lock rules before [emptying a bucket](/r2/buckets/delete-buckets/#empty-a-bucket). Bucket lock rules also apply when [deleting folders](/r2/objects/delete-objects/) from the dashboard.
Loading