---
title: "POST /v1/{+parent}/backupVaults"
method: POST
path: "/v1/{+parent}/backupVaults"
tags: ["projects"]
---

# POST /v1/{+parent}/backupVaults

`POST /v1/{+parent}/backupVaults`

Creates a new BackupVault in a given project and location.

## Path parameters

- `parent` string, required

## Query parameters

- `backupVaultId` string
- `requestId` string
- `validateOnly` boolean

## Request body

- BackupVault — Message describing a BackupVault object.
  - `createTime` string, google-datetime — Output only. The time when the instance was created.
  - `effectiveTime` string, google-datetime — Optional. Time after which the BackupVault resource is locked.
  - `uid` string — Output only. Immutable after resource creation until resource deletion.
  - `encryptionConfig` EncryptionConfig — Message describing the EncryptionConfig of backup vault. This determines how data within the vault is encrypted at rest.
    - `kmsKeyName` string — Optional. The Cloud KMS key name to encrypt backups in this backup vault. Must be in the same region as the vault. Some workload backups like compute disk backups may use their inherited source key instead. Format: projects/{project}/locations/{location}/keyRings/{ring}/cryptoKeys/{key}
  - `totalStoredBytes` string, int64 — Output only. Total size of the storage used by all backup resources.
  - `serviceAccount` string — Output only. Service account used by the BackupVault Service for this BackupVault. The user should grant this account permissions in their workload project to enable the service to run backups and restores there.
  - `name` string — Output only. Identifier. Name of the backup vault to create. It must have the format`"projects/{project}/locations/{location}/backupVaults/{backupvault}"`. `{backupvault}` cannot be changed after creation. It must be between 3-63 characters long and must be unique within the project and location.
  - `backupRetentionInheritance` 'BACKUP_RETENTION_INHERITANCE_UNSPECIFIED' | 'INHERIT_VAULT_RETENTION' | 'MATCH_BACKUP_EXPIRE_TIME' — Optional. Setting for how a backup's enforced retention end time is inherited.
  - `updateTime` string, google-datetime — Output only. The time when the instance was updated.
  - `deletable` boolean — Output only. Set to true when there are no backups nested under this resource.
  - `state` 'STATE_UNSPECIFIED' | 'CREATING' | 'ACTIVE' | 'DELETING' | 'ERROR' | 'UPDATING' — Output only. The BackupVault resource instance state.
  - `description` string — Optional. The description of the BackupVault instance (2048 characters or less).
  - `labels` object — Optional. Resource labels to represent user provided metadata. No labels currently defined:
  - `accessRestriction` 'ACCESS_RESTRICTION_UNSPECIFIED' | 'WITHIN_PROJECT' | 'WITHIN_ORGANIZATION' | 'UNRESTRICTED' | 'WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA' — Optional. Note: This field is added for future use case and will not be supported in the current release. Access restriction for the backup vault. Default value is WITHIN_ORGANIZATION if not provided during creation.
  - `etag` string — Optional. Server specified ETag for the backup vault resource to prevent simultaneous updates from overwiting each other.
  - `backupCount` string, int64 — Output only. The number of backups in this backup vault.
  - `backupMinimumEnforcedRetentionDuration` string, google-duration — Required. The default and minimum enforced retention for each backup within the backup vault. The enforced retention for each backup can be extended. Note: Longer minimum enforced retention period impacts potential storage costs post introductory trial. We recommend starting with a short duration of 3 days or less.
  - `annotations` object — Optional. User annotations. See https://google.aip.dev/128#annotations Stores small amounts of arbitrary data.

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/backupdr.md) · [All operations](https://skmtc.dev/google/apis/backupdr/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/backupdr/revisions/b432f73f0b98/schema)