DEA-C01 Question 240
Select 2Your company stores customer data in an Amazon S3 bucket. Due to new legal requirements, you must ensure that specific customer data is permanently deleted within 30 days of receiving a deletion request. Which combination of steps should you take to meet this requirement?
- A
Enable Object Lock on the S3 bucket and configure a retention policy.
- B
Use Amazon S3 Lifecycle rules to automatically delete objects after 30 days.
- C
Implement S3 Delete Markers and configure the bucket for versioning.
- D
Enable S3 versioning and implement a process to delete all object versions upon a deletion request.
- E
Use AWS Glue Data Catalog to track deleted objects.
Show answer and explanation
Correct answers: B, D
Explanation
To meet the legal requirement to permanently delete customer data within 30 days, you can use S3 Lifecycle rules to automatically delete objects based on their age. Additionally, enabling S3 versioning and deleting all versions of an object ensures that no previous versions remain, fully satisfying the requirement. Other options, such as Object Lock or Delete Markers, do not align with the need for permanent deletion or are not relevant to the scenario.
- A. Incorrect.
Object Lock with a retention policy is used to prevent deletion or modification of objects for a specified period, which does not align with the requirement to delete data after 30 days. Therefore, this is not relevant to the scenario.
- B. Correct.
S3 Lifecycle rules can automate the deletion of objects based on their age, making it a valid solution for deleting data within 30 days of a deletion request.
- C. Incorrect.
S3 Delete Markers are used to mark an object as deleted when versioning is enabled but do not ensure the permanent deletion of all versions of the object. Thus, this does not fully meet the requirement.
- D. Correct.
Enabling versioning and deleting all object versions upon a deletion request ensures that all remnants of the data, including previous versions, are permanently deleted. This aligns with the legal requirement.
- E. Incorrect.
AWS Glue Data Catalog is used for metadata management and is not relevant to the deletion of data stored in S3. It cannot ensure compliance with the deletion requirement.