A company uses Amazon S3 to store confidential audit documents. The S3 bucket uses bucket policies that restrict access to the audit team IAM user credentials according to least privilege. Managers worry about accidental deletion of documents and want a more secure solution. What should a solutions architect do to secure the audit documents?

Enabling versioning on the S3 bucket protects against accidental deletion or overwrites by keeping multiple versions of an object. If an object is deleted, previous versions can be restored. MFA Delete adds an extra layer of security by requiring multi-factor authentication for permanent object deletion or suspension of versioning. This prevents unauthorized or accidental permanent data loss, addressing the managers' concern about accidental deletion. Enabling MFA on IAM user credentials (option 2) enhances login security but doesn't prevent a logged-in user from accidentally deleting objects. An S3 Lifecycle policy (option 3) is for managing object transitions or expirations, not for denying specific actions based on dates for individual users. Restricting access to a KMS key (option 4) would prevent the audit team from accessing the encrypted documents, which is counterproductive.