Answer-first summary for fast verification
Answer: Modify the S3 Lifecycle policy to include deletion of previous versions.
The correct answer is B: 'Modify the S3 Lifecycle policy to include deletion of previous versions.' The issue arises because the current S3 Lifecycle policy only deletes the current versions of objects after 3 years, but due to S3 versioning being enabled, previous versions are still retained in the bucket. By updating the S3 Lifecycle policy to also delete previous versions of objects after they are 3 years old, you can ensure that all versions of the CloudTrail logs are removed, thereby preventing the count of objects in the S3 bucket from continuing to rise and keeping storage costs in check.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
A company uses AWS Organizations to enforce CloudTrail across multiple accounts, with logs stored in an S3 bucket configured for versioning. Despite an S3 Lifecycle policy set to delete objects after 3 years, the bucket's object count continues to grow after 4 years, with a steady log delivery rate. What is the most cost-effective solution to remove objects older than 3 years?
A
Set CloudTrail to expire objects after 3 years.
B
Modify the S3 Lifecycle policy to include deletion of previous versions.
C
Deploy a Lambda function to delete S3 objects older than 3 years.
D
Ensure the parent account owns all S3-delivered objects.
No comments yet.