A company stores customer records in Amazon S3. The company must not delete or modify the customer record data for 7 years after each record is created. The root user also must not have the ability…

Question

Options

• AEnable governance mode on the S3 bucket. Use a default retention period of 7 years.
• BEnable compliance mode on the S3 bucket. Use a default retention period of 7 years.
• CPlace a legal hold on individual objects in the S3 bucket. Set the retention period to 7 years.
• DSet the retention period for individual objects in the S3 bucket to 7 years.

• B
  95% (19)
• D
  5% (1)

Explanation

Compliance Mode is the stricter mode of S3 Object Lock. When enabled, it ensures that no one, not even the root user, can modify or delete the object until the retention period expires. In this case, to meet the requirement of preventing any deletion or modification of the data for 7 years, compliance mode is the correct choice. Governance Mode allows some users with special permissions (such as the root user) to override the lock and delete or modify the data, which does not meet the strict requirement that even the root user should not have this ability. Legal Hold is used to prevent deletion of objects without specifying a time-based retention period, but it can be removed by users with sufficient permissions, and the root user might still be able to delete the data. Retention Period for Individual Objects is possible, but enabling compliance mode provides a more robust solution by applying the same 7-year retention policy bucket-wide, ensuring that no modifications or deletions can occur during that period.

No community discussion yet for this question.