A law firm needs to publish hundreds of files so the public can read them. Modifications or deletions by anyone before a specified future date must be prevented. Which solution meets these requirements in the MOST secure way?

The correct answer leverages S3 Object Lock in compliance mode, which prevents objects from being overwritten or deleted by any user, including the root user, until the retention period expires. Enabling S3 Versioning is a prerequisite for Object Lock. Static website hosting allows public access, and a bucket policy grants read-only permissions. The first incorrect option relies solely on IAM permissions, which can be overridden by users with sufficient privileges, failing to prevent modifications or deletions. The third incorrect option uses a Lambda function for recovery, which is reactive and doesn't prevent the initial modification or deletion, making it less secure than Object Lock. The fourth incorrect option incorrectly states that Object Lock can be applied to a "folder" within S3; Object Lock applies at the object or bucket level, not to prefixes (folders).