hesela.devObject lock
An object lock enforces retention restrictions on a specified object version through a retention policy or hold.
S3 requires versioning; enabling Object Lock and protecting a particular version are distinct configuration steps. [1] Its retention API distinguishes GOVERNANCE and COMPLIANCE and includes event-hold settings for variable retention; do not assume every retention date was fixed at upload. [2]
Relations
- related
- object-versioning, legal-hold, immutability-storage, worm-storage, restore-test
Advantages
- A protected version survives a new upload under the same key; protection is version-scoped. [3]
Limitations
- Governance bypass requires permission and an explicit request; it does not clear a legal hold. [4]
- For S3 variable retention, an Inventory report reflects its generation time; query GetObjectRetention for current metadata instead of treating the report as live state. [4]
- Neither retained bytes nor a lock label proves that encryption keys remain usable. [4]