ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 348 - SOA-C02 discussion

Report
Export

A company migrates a write-once, read-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in governance mode. During the migration, the company copies unneeded data to the S3 bucket.

A SysOps administrator attempts to delete the unneeded data from the S3 bucket by using the AWS CLI. However, the SysOps administrator receives an error.

Which combination of steps should the SysOps administrator take to successfully delete the unneeded data? (Select TWO.)

A.
Increase the Retain Until Date.
Answers
A.
Increase the Retain Until Date.
B.
Assume a role that has the s3:BypassLegalRetention permission.
Answers
B.
Assume a role that has the s3:BypassLegalRetention permission.
C.
Assume a role that has the s3:BypassGovernanceRetention permission.
Answers
C.
Assume a role that has the s3:BypassGovernanceRetention permission.
D.
Include the x-amz-bypass-governance-retention:true header in the request when issuing the delete command.
Answers
D.
Include the x-amz-bypass-governance-retention:true header in the request when issuing the delete command.
E.
Include the x-amz-bypass-legal-retention:true header in the request when issuing the delete command.
Answers
E.
Include the x-amz-bypass-legal-retention:true header in the request when issuing the delete command.
Suggested answer: C, D

Explanation:

When using Amazon S3 Object Lock configured in governance mode, deleting objects before their retention period ends requires specific permissions. To bypass these governance restrictions, the administrator must:

C: Assume a role that has the s3:BypassGovernanceRetention permission. This permission allows the role to override the governance mode restrictions.

D: Include the x-amz-bypass-governance-retention:true header in the delete request. This header is necessary to programmatically bypass the governance retention settings when making a delete request via the AWS CLI or SDK. These steps enable the deletion of objects under governance mode retention without waiting for the retention period to expire, addressing the need to remove unintended data uploads effectively. For further details, refer to the AWS documentation on S3 Object Lock Amazon S3 Object Lock.

asked 16/09/2024
Kevin Klyn
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first