Ultimate access to all questions.
Upgrade Now 🚀
Sign in to unlock AI tutor
How should a solutions architect configure Amazon S3 to ensure that data remains immutable until explicitly changed by authorized users, and only those users can delete the objects?
A
By creating an S3 Glacier vault and applying a WORM policy.
B
By enabling S3 Object Lock with a 100-year governance mode retention period and versioning.
C
By using AWS CloudTrail to monitor and restore from backup in case of unauthorized modifications.
D
By enabling S3 Object Lock, versioning, applying legal holds, and granting s3:PutObjectLegalHold permission to authorized IAM users.