To protect against a ransomware attack that deletes all objects in an S3 bucket, which feature should you enable that ensures even the root user cannot delete objects until a specified retention period ends?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: S3 Object Lock (Compliance Mode)

Compliance Mode is the strongest protection, making data immutable even for administrative accounts....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon S3

To protect against a ransomware attack that deletes all objects in an S3 bucket, which feature should you enable that ensures even the root user cannot delete objects until a specified retention period ends?

✓ Correct Answer & ExplanationAmazon S3

Correct Answer

S3 Object Lock (Compliance Mode)

Why This Answer Is Correct

Compliance Mode is the strongest protection, making data immutable even for administrative accounts.

📚 What This Question Tests

This question evaluates your knowledge of Amazon S3 — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon S3 is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.