SOA-C02 · Question #673
A company migrates a write-once, read-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in governance mode. During the migration, the company copies unneeded data to the S3…
The correct answer is C. Assume a role that has the s3:BypassGovernanceRetention permission. D. Include the x-amz-bypass-governance-retention:true header in the request when issuing the. The company has configured S3 Object Lock in governance mode. In governance mode, objects cannot be deleted unless the requester has the s3:BypassGovernanceRetention permission. To delete objects protected by governance mode, the SysOps administrator must: 1. Assume a role with…
Question
A company migrates a write-once, read-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in governance mode. During the migration, the company copies unneeded data to the S3 bucket. A SysOps administrator attempts to delete the unneeded data from the S3 bucket by using the AWS CLI. However, the SysOps administrator receives an error. Which combination of steps should the SysOps administrator take to successfully delete the unneeded data? (Choose two.)
Options
- AIncrease the Retain Until Date.
- BAssume a role that has the s3:BypassLegalRetention permission.
- CAssume a role that has the s3:BypassGovernanceRetention permission.
- DInclude the x-amz-bypass-governance-retention:true header in the request when issuing the
- EInclude the x-amz-bypass-legal-retention:true header in the request when issuing the delete
How the community answered
(41 responses)- A17% (7)
- B7% (3)
- C73% (30)
- E2% (1)
Explanation
The company has configured S3 Object Lock in governance mode. In governance mode, objects cannot be deleted unless the requester has the s3:BypassGovernanceRetention permission. To delete objects protected by governance mode, the SysOps administrator must: 1. Assume a role with the s3:BypassGovernanceRetention permission This allows the user to bypass governance mode restrictions. 2. Use the x-amz-bypass-governance-retention:true header in the delete request This explicitly tells S3 to override the governance mode retention settings and allow deletion.
Topics
Community Discussion
No community discussion yet for this question.