====== S3 Object Lock ======

**What it is:** A feature that prevents objects from being deleted or overwritten for a fixed retention period (WORM-style protection).

**What it’s for:**
  * Meet compliance requirements (financial, legal retention).
  * Protect critical data from accidental or malicious deletion.

**Key ideas:**
  * Works at the **object version** level (requires versioning).
  * Uses **retention modes** and **retention periods**.
  * Retention is typically expressed via a **Retain Until Date** for a specific object version.

**Hard words (English + IPA + Vietnamese meaning):**
  * *retention* /rɪˈtenʃn/: thời gian lưu giữ
  * *compliance* /kəmˈplaɪəns/: tuân thủ
  * *malicious* /məˈlɪʃəs/: độc hại/cố ý xấu
  * *overwrite* /ˌoʊvərˈraɪt/: ghi đè

**Child pages:**
  * [[aws:storage:s3:object-lock:retention|Retention (mode, period, Retain Until Date)]]
  * [[aws:storage:s3:object-lock:bucket-defaults|Bucket Default Retention Settings]]