SAA-C03 Q318 · Storage

Question

A financial services company must retain log data for 1 year. The company stores log files in an Amazon S3 bucket and wants to prevent any user from deleting or overwriting the log files during this period. The data must remain available for read-only requests. Which solution will meet these requirements?

Accepted Answer

**Answer A: S3 Versioning + Object Lock in Compliance Mode with 1-year retention**

Let's map each requirement to the solution:

1. **Retain log data for 1 year** → Object Lock with a 1-year retention period enforces this at the storage level. Objects cannot be deleted or overwritten until the retention period expires.

2. **Prevent ANY user from deleting or overwriting** → **Compliance mode** is the key here. In compliance mode, even the root account cannot delete, overwrite, or shorten the retention period. This is the strongest protection available in S3, designed specifically for regulatory requirements in industries like financial services.

3. **Data must remain available for read-only requests** → S3 Object Lock does NOT prevent reads. It only prevents modifications and deletions. O

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips