SAA-C03 Q103 · Storage

Question

A company needs to implement a new data retention policy for regulatory compliance. As part of this policy, sensitive documents that are stored in an Amazon S3 bucket must be protected from deletion or modification for a fixed period of time. Which solution will meet these requirements?

Accepted Answer

**Answer B: S3 Object Lock in Compliance Mode** is correct because it meets every requirement:

1. **Protection from deletion**: In compliance mode, NO ONE — not even the root account user — can delete the object version during the retention period. This is the strongest immutability guarantee AWS offers.

2. **Protection from modification**: Object Lock works with versioning. The locked version cannot be overwritten. Any 'update' creates a new version, but the original locked version remains untouched.

3. **Fixed period of time**: Object Lock uses a **retention period** that you set (a specific number of days or a specific date). Once set in compliance mode, this period **cannot be shortened** — only extended.

4. **Regulatory compliance**: The keyword 'regulatory compliance' is the deci

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips