Choosing Between S3 Object Lock and Versioning for Cost-Optimized

[Saar Samoha]

<div>
</div>

Regarding the question below. I think the correct answer is 3, not 1. there is no request for locking objects here. I also verified with ChatGPT

Category: CSAA – Design Cost-Optimized Architectures

A solutions architect is designing a cost-efficient, highly available storage solution for company data. One of the requirements is to ensure that the previous state of a file is preserved and retrievable if a modified version of it is uploaded. Also, to meet regulatory compliance, data over 3 years must be retained in an archive and will only be accessible once a year.

How should the solutions architect build the solution?

1. Create an S3 Standard bucket with S3 Object Lock in compliance mode enabled then configure a lifecycle rule that transfers files to Amazon S3 Glacier Deep Archive after 3 years.
2. Create an S3 Standard bucket and enable S3 Object Lock in governance mode.

3. Create an S3 Standard bucket with object-level versioning enabled and configure a lifecycle rule that transfers files to Amazon S3 Glacier Deep Archive after 3 years.

4. Create a One-Zone-IA bucket with object-level versioning enabled and configure a lifecycle rule that transfers files to Amazon S3 Glacier Deep Archive after 3 years.

[Nikee-TutorialsDojo]

Hello Saar Samoha,

You’re right that enabling object-level versioning and setting up a lifecycle rule to move files to Amazon S3 Glacier Deep Archive is an excellent approach for preserving file states while maintaining cost efficiency.

However, when dealing with regulatory compliance, it’s not just about data retention—it’s also about ensuring that the data cannot be modified or deleted during the retention period. This is where S3 Object Lock in compliance mode becomes essential. It guarantees data immutability, preventing both modification and deletion.

While your proposed solution addresses versioning and archival needs, integrating S3 Object Lock in compliance mode ensures adherence to stricter compliance regulations, particularly where data integrity and non-repudiation are required.

It’s also important to note that AWS exam questions often contain subtle nuances or ambiguous language. We adopt This strategy in our practice tests to mirror the exam style.

So, while the question may not explicitly mention blocking file modifications, regulatory compliance often implies such measures. Adding S3 Object Lock helps ensure the solution fully complies with the necessary standards.

I hope this clarifies things! Please feel free to reach out if you need any further assistance.

Regards,

Nikee @ Tutorials Dojo