- Newest
- Most votes
- Most comments
Sure, you can use the MFA delete setting to achieve this since enabling MFA delete will require multi-factor authentication for any request to permanently delete an object version. That means that apps can still issue a DeleteObject request, resulting in a delete marker (soft-delete), but they won't be able to permanently delete objects without the additional MFA authentication. However, it's important to note that MFA delete does not affect lifecycle rules. Your existing lifecycle rule to remove expired versions after 30 days will continue to work as expected.
Hello.
Although documented in the documentation below, lifecycle rules are not supported on S3 buckets with MFA deletion enabled.
In other words, the settings themselves cannot be configured.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-and-other-bucket-config.html#lifecycle-general-considerations-mfa-enabled-bucket
S3 Lifecycle configuration on multi-factor authentication (MFA)-enabled buckets isn't supported.
Hello,
NOTE:** Amazon S3 LifeCycle rules are exempt from MFA Delete restrictions.**
--> Step-by-Step Guide to Register MFA Delete on AWS S3 https://www.geeksforgeeks.org/configuring-mfa-delete-on-s3-buckets/#
Deleting object versions from a versioning-enabled bucket - page 1922 https://docs.aws.amazon.com/pdfs/AmazonS3/latest/userguide/s3-userguide.pdf
How do I turn on MFA delete for my Amazon S3 bucket?
https://repost.aws/knowledge-center/s3-bucket-mfa-delete
Enable MFADelete on S3 with Life Cycle Configuration https://repost.aws/questions/QUqIJY4b7_Te22aIhLp9MQ5w/enable-mfadelete-on-s3-with-life-cycle-configuration
answered 2 years ago
Relevant content
- AWS OFFICIALUpdated a year ago
