S3 Object Lock Legal Holds vs. Retention Period

0

Hello,

As I am currently learning about S3, Object Lock I am trying to understand the different values which Legal Holds and Retention Periods have. I know the features of both of them, but I am struggling to find real-life scenarios where one or the other would be beneficial to apply. It would be greatly appreciated if somebody could share some insights on how they know or use one or the other.

Thanks in advance for any answers.

profile picture
Julian
질문됨 한 달 전300회 조회
2개 답변
2
수락된 답변

A retention period protects an object version for a fixed amount of time. When you place a retention period on an object version, Amazon S3 stores a timestamp in the object version's metadata to indicate when the retention period expires. After the retention period expires, the object version can be overwritten or deleted.

With Object Lock, you can also place a legal hold on an object version. Like a retention period, a legal hold prevents an object version from being overwritten or deleted. However, a legal hold doesn't have an associated fixed amount of time and remains in effect until removed. Legal holds can be freely placed and removed by any user who has the s3:PutObjectLegalHold permission.

Suppose that you place a legal hold on an object version and that object version is also protected by a retention period. If the retention period expires, the object doesn't lose its WORM protection. Rather, the legal hold continues to protect the object until an authorized user explicitly removes the legal hold. Similarly, if you remove a legal hold while an object version has a retention period in effect, the object version remains protected until the retention period expires. https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html

The legal hold will hold it until someone releases that has the correct level of access. If you retain an object then after it expires anyone with DeleteObject can delete the object. But if a legal hold is in place, no one even with delete can remove an object. Grant PutObjectLegalHold to a limited number of individuals.

If you are in a legal mitigation/court case you place the object on Legal Hold until such case the lawyers release it etc.

profile picture
전문가
답변함 한 달 전
profile picture
전문가
검토됨 한 달 전
1

The difference between the two is whether the retention period is fixed.

The retention period of data is usually determined by the organization's rules, so the Retention Period is used.

The following blog article may be helpful.

https://aws.amazon.com/jp/blogs/storage/protecting-data-with-amazon-s3-object-lock/

profile picture
전문가
shibata
답변함 한 달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인