A company wants to back up its on-premises virtual machines (VMs) to AWS. The backup solution exports on-premises backups to an Amazon S3 bucket as objects. The S3 backups must be retained for 30 days and automatically deleted after 30 days. Which combination of steps will meet these requirements? (Choose three.)

To meet the requirement of retaining backups for 30 days and then automatically deleting them, you need a combination of S3 Object Lock and an S3 Lifecycle policy. 1. Create an S3 bucket that has S3 Object Lock enabled: Object Lock prevents objects from being deleted or overwritten for a fixed amount of time or indefinitely. This ensures the backups are retained for the specified period. 2. Configure a default retention period of 30 days for the objects: With Object Lock enabled, you can set a default retention period. Any new object uploaded to the bucket will automatically inherit this 30-day retention, ensuring they cannot be deleted before that time. 3. Configure an S3 Lifecycle policy to expire the objects after 30 days: An S3 Lifecycle policy can be used to automatically delete objects after a specified number of days from their creation. This handles the automatic deletion requirement after the 30-day retention period has passed. Enabling object versioning is not directly required for this specific retention and deletion scenario. Tagging objects with a retention period doesn't enforce retention; Object Lock does. A Lifecycle policy to protect objects isn't a standard S3 feature; Object Lock provides protection.