Câu 135: AWS Certified Solutions Architect - Associate SAA-C03(New)

A company needs to save the results from a medical trial to an Amazon S3 repository. The repository must allow a few scientists to add new files and must restrict all other users to read-only access. No users can have the ability to modify or delete any files in the repository. The company must keep every file in the repository for a minimum of 1 year after its creation date. Which solution will meet these requirements?

1. A. Use S3 Object Lock in governance mode with a legal hold of 1 year.
2. B. Use S3 Object Lock in compliance mode with a retention period of 365 days. — đáp án hiện tại
3. C. Use an IAM role to restrict all users from deleting or changing objects in the S3 bucket. Use an S3 bucket policy to only allow the IAM role.
4. D. Configure the S3 bucket to invoke an AWS Lambda function every time an object is added. Configure the function to track the hash of the saved object so that modified objects can be marked accordingly.