AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 102

Question

A security engineer needs to implement a write-once-read-many (WORM) model for data that a company will store in Amazon S3 buckets. The company uses the S3 Standard storage class for all of its S3 buckets. The security engineer must ensure that objects cannot be overwritten or deleted by any user, including the AWS account root user. Which solution will meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create new S3 buckets with S3 Object Lock enabled in compliance mode. Place objects in the S3 buckets. Amazon S3 provides durable, scalable object storage that is fully managed.

AWS Certified Security - Specialty SCS-C02 — Question 102