Amazon S3 _ Security
Glacier Vault lock and S3 object lock
To protect from the accidental object deletion or modification we need Glacier Vault locak and S3 object lock.
Get Cloudy’s stories in your inbox
Join Medium for free to get updates from this writer.
S3 Glacier Vault Lock _ Write Once Read Many model also creates a Vault lock policy which will lock the policy for future edits after that the object cannot be deleted or modified even by the admin. Due to this its helpful for compliance and data retention.
S3 Object lock _ Same way it adopts to the WORM Model and to make it work versioning must be enabled. Object version deletion can also be blocked for a specific time.
Retention Mode -Compliance Where object version cannot be over written on deleted by even an root user and object retention modes can’t be changed and retention periods can’t be shortened.
Retention Mode -Governance Admin users have the special permission to alter the change retention or delete the object
