SAA-C03 Question 109

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Legal hold on the objects makes objects immutable indefinitely, with no expiration data. The objects stay protected until someone (who is authorized) explicitly removes the legal hold. By granting only specific users the s3:PutObjectLegalHold permission, only those users can lift the protection.

• Chose B1

  B. Create an S3 bucket with S3 Object Lock enabled. Enable versioning. Set a retention period of 100 years. Use governance mode as the S3 bucket’s default retention mode for new objects. ✅ Explanation: To meet the requirements of immutability and controlled deletion, Amazon S3 Object Lock is the ideal solution: S3 Object Lock allows you to store objects using a write-once-read-many (WORM) model. Governance mode lets you protect objects from being overwritten or deleted, but authorized users can override the lock if needed. Versioning must be enabled to use Object Lock. Setting a long retention period (e.g., 100 years) ensures objects remain unchangeable until explicitly modified. Only users with the necessary IAM permissions (like s3:BypassGovernanceRetention) can delete or modify objects.

• Chose B1

  Here's why option B is suitable: S3 Object Lock: This feature allows you to prevent objects from being deleted or changed for a specified retention period. In governance mode, even if a user has delete permissions, they cannot delete the objects until the retention period has expired. Versioning: Enabling versioning ensures that multiple versions of an object are stored. This provides an additional layer of data protection, allowing you to restore data if an object is accidentally modified or deleted. Retention Period: By setting a long retention period (like 100 years), you ensure compliance with data retention policies beyond short-term needs.