Your organization wants to ensure that all their critical S3 buckets have 'Object Lock' enabled to prevent any data from being deleted for 7 years due to compliance. Which mode of Object Lock provides the strongest protection, where even the ROOT user cannot delete the objects?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Compliance Mode

In Compliance Mode, a protected object version cannot be overwritten or deleted by any user, including the root user in your AWS account. It ensures that data remains immutable dur...

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon S3

Your organization wants to ensure that all their critical S3 buckets have 'Object Lock' enabled to prevent any data from being deleted for 7 years due to compliance. Which mode of Object Lock provides the strongest protection, where even the ROOT user cannot delete the objects?

✓ Correct Answer & ExplanationAmazon S3

Correct Answer

Compliance Mode

Why This Answer Is Correct

In Compliance Mode, a protected object version cannot be overwritten or deleted by any user, including the root user in your AWS account. It ensures that data remains immutable during the retention period.

📚 What This Question Tests

This question evaluates your knowledge of Amazon S3 — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon S3 is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.