---
title: "Using Immutability With Acronis Cyber Protect Cloud"
slug: "using-immutability-with-acronis-cyber-protect-cloud"
updated: 2026-06-05T18:23:25Z
published: 2026-06-05T18:23:25Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wasabi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using Immutability With Acronis Cyber Protect Cloud

Use Wasabi’s Object Lock feature with Acronis Cyber Protect Cloud to make your backups immutable. To configure immutable backups, please follow the instructions below.

### Prerequisites

- An active Acronis Cyber Protect Cloud account to access Cyber Protection Service.
  - If you are an Acronis partner, [create accounts](https://www.acronis.com/en-us/support/documentation/AcronisCyberCloud/index.html#creating-user-account.html) for your customers.
  - If you are a customer of an Acronis partner, you will [receive the user account](https://www.acronis.com/en-us/support/documentation/CyberProtectionService/#activating-account.html) from your partner.
  - Have Cyber Administrator, User, or Company Administrator access.
  - Agents running version 24.07 or higher are required for the object lock settings to be applied.
- A Wasabi Cloud Storage account.

### Access Requirements Needed to Backup to Wasabi

To define a Wasabi bucket as a backup location, a user with relevant policies needs to be created.

For security purposes, root user access keys cannot be used to define a backup location in Acronis. Instead, a user with relevant policies should be created. This user's credentials will be used to define the Backup Location in Acronis.

The sections below outline the steps to fulfill the access requirements needed to add a Wasabi bucket as a backup location in Acronis.

  

#### Policy Permissions

Create a policy with the below permissions. For more information, review [Creating a Policy](https://docs.wasabi.com/v1/docs/en/creating-a-policy?highlight=undefined).

This policy gives the user the minimum set of permissions to a wide scope of resources.

In the policy, * indicates all resources.

```json
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListAllMyBuckets",
                "s3:GetBucketLocation",
                "s3:GetBucketObjectLockConfiguration",
                "s3:GetBucketVersioning"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:ListBucketVersions"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "iam:CreateRole",
                "iam:AttachRolePolicy",
                "sts:GetCallerIdentity",
                "sts:AssumeRole"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:GetObjectVersion",
                "s3:GetObjectRetention",
                "s3:PutObjectRetention"
            ],
            "Resource": "*"
        }
    ]
}
```

#### Creating a User

Create a user with programmatic (create API key) access and apply the policy created above to the user. For more detail, refer to [Creating a User](https://docs.wasabi.com/docs/creating-a-user-account-and-access-key#creating-a-user).

**CAUTION:** Remember to save the access keys, as they will be needed to define the backup location.

### Creating an Immutable backup location in Acronis Cyber Protect Cloud

**Note**: To use Wasabi with Acronis Cyber Protect Cloud without object lock, please click [here](https://docs.wasabi.com/v1/docs/how-do-i-use-acronis-cyber-protect-cloud-with-wasabi).

1. Log in the Wasabi console and create an Object Lock enabled bucket. For more detail, review [Object Lock: Enabling](https://docs.wasabi.com/docs/object-locking). A lifecycle rule needs to be configured for the bucket to ensure proper cleanup (it will be detailed later in this section).
2. Log in to the Acronis Cyber Protect console. Click **Backup Storage**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Step2.png)
3. In the Backup Storage tab, click **+Add Location**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-12 at 3.00.56 PM.png)
4. Navigate to Public cloud and select******S****3 compatible******from the drop-down menu. Click **Connect**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-12 at 1.26.17 PM(1).png)
5. In the S3 compatible connection window, provide the following details and click **Connect**.

**Endpoint URL** - Provide the endpoint URL of the region where the bucket is located.

**Access Key ID** - The access key of the Wasabi user created above in [Access requirements needed to backup to Wasabi](/v1/docs/using-immutability-with-acronis-cyber-protect-cloud#access-requirements-needed-to-backup-to-wasabi).

**Access Key Secret** - The secret access key of the Wasabi user created above in [Access requirements needed to backup to Wasabi](/v1/docs/using-immutability-with-acronis-cyber-protect-cloud#access-requirements-needed-to-backup-to-wasabi).

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-12 at 3.47.49 PM.png)

> This configuration example discusses the use of Wasabi's us-west-1 storage region. To use another Wasabi storage region, use the appropriate Wasabi service URL.
6. In the Buckets dropdown menu, select the object lock enabled bucket created in Step 1.

Select the checkbox for **Backup immutability period** (Days). Configure the desired number of days. Click**Add**. ![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-12 at 9.00.52 PM.png)
7. The Locations page will display the newly added location.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-12 at 9.16.25 PM.png)
8. Assign the backup location to the desired Protection plan and configure the retention period as shown below. It is recommended to keep the retention period longer than the Backup immutability period configured in Step 6.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-12 at 9.24.05 PM(1).png)
9. A lifecycle rule needs to be configured for the object lock enabled bucket to ensure proper cleanup in order to avoid increase in storage consumption.

Log in to the Wasabi console. On the Buckets list, click![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-1698327400423.png)for the desired bucket. Click **Settings**.
10. Click the **Lifecycle**tab. The Lifecycle Policy panel is displayed. In this example, no lifecycle policy is defined yet. Click **Create New Rule**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-16 at 3.19.50 PM(1).png)
11. Configure the policy with the settings below.

Provide a Lifecycle rule name and choose the scope of the rule to **Apply to all objects in the bucket**.

Select the option **Permanently delete concurrent version of objects**and provide the number of days after which the object becomes concurrent. It is recommended to configure this number to be 1 day longer than the retention period configured in the previous step (In our example, it is set to 4 days as the retention period is 3 days).

Select the **Delete expired object delete markers.**Click **Save**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-06-12 at 9.36.50 PM(1).png)

All the backups written to the backup target will now be immutable.