You can also use S3 legal hold in compliance mode, although, I'm not sure how you would eventually delete it. "S3 Object Lock can be configured in one of two m

You can also use S3 legal hold in compliance mode, although, I'm not sure how you would eventually delete it. "S3 Object Lock can be configured in one of two modes. When deployed in Governance mode, AWS accounts with specific IAM permissions are able to remove object locks from objects. If you require stronger immutability to comply with regulations, you can use Compliance Mode. In Compliance Mode, the protection cannot be removed by any user, including the root account." https://aws.amazon.com/about-aws/whats-new/2018/11/s3-object-lock/ https://aws.amazon.com/about-aws/whats-new/2018/11/s3-object...