S3 Object Lock

• Write once read many (WORM) describes a data storage device in which information, once written, cannot be modified; this affords the assurance that the data cannot be tampered with once it is written to the device

• With S3 Object Lock, you can store objects using a write-once-read-many (WORM) model.

Retention modes

• S3 Object Lock provides two retention modes:

  • Governance mode - Users can't overwrite or delete an object version or alter its lock settings unless they have special permissions.

  • Compliance mode - A protected object version can't be overwritten or deleted by any user, including the root user in your AWS account.