A company has formed a new partnership with a vendor that will process the company’s customer data. The company will upload data files as objects to an Amazon S3 bucket, and the vendor will download the objects for processing. The objects contain sensitive data. A security engineer must ensure that objects do not remain in the S3 bucket for longer than 72 hours. Which solution meets this requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: Configure an S3 Lifecycle rule on the S3 bucket to expire objects after 72 hours..
Why this is the answer
An S3 Lifecycle rule is the most efficient and native AWS solution for automatically managing object retention. By configuring a lifecycle rule to expire objects after 72 hours, S3 will automatically delete them once they reach that age, ensuring compliance with the requirement. Amazon Macie is for sensitive data discovery and protection, not for automated object deletion based on age. While it can identify sensitive data, it doesn't have a built-in feature to delete objects based on a time-based rule. Creating an EventBridge rule with a Lambda function is a custom solution that would work but is more complex and less efficient than a native S3 Lifecycle rule for this specific task. S3 Intelligent-Tiering is a storage class optimization feature that moves objects between access tiers; it does not have a built-in capability to expire objects after a set duration.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed