A company uploads data files as objects into an Amazon S3 bucket. A vendor downloads the objects to perform data processing. A security engineer must implement a solution that prevents objects from…

Question

Options

• AConfigure S3 Versioning to expire object versions that have been in the bucket for 72 hours.
• BConfigure an S3 Lifecycle configuration rule on the bucket to expire objects after 72 hours.
• CUse the S3 Intelligent-Tiering storage class and configure expiration after 72 hours.
• DGenerate presigned URLs that expire after 72 hours.

• A
  9% (3)
• B
  71% (25)
• C
  6% (2)
• D
  14% (5)

Explanation

Amazon S3 Lifecycle configuration rules are the native, automated mechanism for managing object retention and deletion. According to AWS Certified Security - Specialty documentation, lifecycle rules can be configured to expire objects based on the number of days since object creation. Once the expiration time is reached, Amazon S3 permanently deletes the objects without manual intervention. This solution directly enforces a maximum retention period of 72 hours and ensures compliance regardless of whether the vendor downloads the data or not. Lifecycle rules are evaluated continuously by Amazon S3 and do not require scripts, cron jobs, or additional services, making them the most operationally efficient and cost-effective solution. S3 Versioning controls versions but does not enforce object deletion timelines. S3 Intelligent- Tiering optimizes storage cost but does not delete objects. Presigned URLs only control access duration and do not remove objects from storage. AWS explicitly recommends lifecycle policies for automated data retention enforcement.

No community discussion yet for this question.