
Ultimate access to all questions.
A company must store medical trial results in an Amazon S3 repository, ensuring only a select group of scientists can add files, while all others have read-only access. The solution must prevent file modification or deletion and guarantee file retention for at least one year post-creation. Which approach meets these criteria?
A
Implement S3 Object Lock in governance mode with a 1-year legal hold.
B
Apply S3 Object Lock in compliance mode with a 365-day retention period.
C
Utilize an IAM role to prevent deletion or modification of S3 objects, and an S3 bucket policy to grant the role add-only access for scientists and read-only for others.
D
Enable an S3 bucket to trigger a Lambda function on new object additions, which records object hashes to detect modifications.