AWS Certified Security - Specialty SCS-C03

By Amazon · Question Mode

QuestionQ54

Data Protection

A company requires a solution to prevent critical data stored in Amazon S3 buckets from being permanently deleted.

To meet disaster recovery requirements, the company must replicate S3 objects from its primary AWS Region to a secondary Region. The company must also ensure that users with administrator access cannot permanently delete the data in the secondary Region.

Which solution meets these requirements?

Explanation

Amazon S3 Object Lock in compliance mode prevents a protected object version from being overwritten or permanently deleted by any user, including administrators. S3 Replication can copy locked objects and their Object Lock retention metadata to the destination bucket; when the source bucket has Object Lock enabled, destination buckets must also have Object Lock enabled. This creates immutable replicated data in the secondary Region for the retention period.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!