A company must archive its documents by using a write-once, read-many (WORM) model to meet legal and compliance obligations. Which feature of Amazon S3 can the company use to meet this requirement?

Question

Options

• AS3 Versioning
• BS3 bucket policy
• CS3 Glacier Vault Lock
• DS3 multi-factor authentication (MFA) delete

• B
  4% (1)
• C
  92% (23)
• D
  4% (1)

Explanation

S3 Glacier Vault Lock for WORM Compliance

S3 Glacier Vault Lock is specifically designed to enforce a WORM model by allowing you to lock a vault policy so that it cannot be changed or deleted, ensuring data immutability for a defined retention period - making it the ideal choice for legal and compliance archiving requirements.

Why the distractors are wrong:

• S3 Versioning (A) preserves multiple versions of objects but does not prevent deletion or overwriting, so it doesn't enforce true WORM compliance.
• S3 bucket policy (B) can restrict access but policies can be modified by administrators, meaning data is not truly immutable.
• MFA Delete (D) adds an extra authentication step before deletion but still allows deletion to occur - it doesn't lock data permanently.

Memory Tip: Think of "Vault Lock" like a physical vault with a time-locked safe - once sealed, nobody can open it until the retention period expires. The word "Lock" is your clue that this is the feature that locks data in place for compliance purposes.

No community discussion yet for this question.