If you must apply, update, or remove S3 Object Lock settings to a large number of objects in a bucket, consider using S3 Batch Operations support for S3 Object Lock. When should I use S3 Batch Operations support for S3 Object Lock? Use retention periods if you know the exact date for retention, and select the retention mode that aligns with your requirements. For example, you may have an object with a 1-year retention date plus a legal hold. Instead, a legal hold remains in place until you explicitly remove it.Īn object version can have either a retention period or a legal hold, or a combination of both. A legal hold provides the same protection as a retention period, but it has no expiration date.In compliance mode, a protected object version cannot be overwritten or deleted by any user, including the root user in your AWS account.In governance mode, you protect objects against being deleted by most users, but you can still grant some user permission to alter retention settings or delete objects if necessary.S3 Object Lock provides two retention period modes: During this period, your object is WORM-protected and the object version cannot be deleted or changed. A retention period specifies a fixed period of time during which an object remains locked.The basicsĪmazon S3 Object Lock provides two ways to manage object retention. In addition, it simply adds another layer of protection from object changes and deletions. S3 Batch Operations support for S3 Object Lock helps you meet regulatory requirements for write once read many (WORM) storage.
With S3 Object Lock, you can apply retention dates and legal holds to your objects, preventing them from being deleted or overwritten indefinitely or until a particular date has passed.
To learn more about S3 Batch Operations, check out this blog post. All you provide is the list of objects, and S3 Batch Operations handles all the manual work, including managing retries and displaying progress. S3 Batch Operations is a feature that lets you perform repetitive or bulk actions like copying or updating tag sets across millions of objects with a single request. In this post, I share ways you can use these two Amazon S3 features together to address common data protection needs. Amazon S3 Batch Operations now supports S3 Object Lock.
0 kommentar(er)
