Exam AWS Certified SysOps Administrator - Associate topic 1 question 274 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 274
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A company migrates a write-once, ready-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in governance mode. During the migration, the company copies unneeded data to the S3 bucket.

A SysOps administrator attempts to delete the unneeded data from the S3 bucket by using the AWS CLI. However, the SysOps administrator receives an error.

Which combination of steps should the SysOps administrator take to successfully delete the unneeded data? (Choose two.)

A. Increase the Retain Until Date.
B. Assume a role that has the s3:BypassLegalRetention permission.
C. Assume a role that has the s3:BypassGovernanceRetention permission.
D. Include the x-amz-bypass-governance-retention:true header in the request when issuing the delete command.
E. Include the x-amz-bypass-legal-retention:true header in the request when issuing the delete command.

Show Suggested Answer

Suggested Answer: CD 🗳️

by Gomer at May 2, 2023, 3:41 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Gomer

Highly Voted 1 year ago

Selected Answer: CD

"To override or remove governance-mode retention settings, a user must have the s3:BypassGovernanceRetention permission and must explicitly include x-amz-bypass-governance-retention:true as a request header with any request that requires overriding governance mode." https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-retention-modes

upvoted 11 times

...

Christina666

Most Recent 10 months ago

Selected Answer: CD

In governance mode, users can't overwrite or delete an object version or alter its lock settings unless they have special permissions. With governance mode, you protect objects against being deleted by most users, but you can still grant some users permission to alter the retention settings or delete the object if necessary. You can also use governance mode to test retention-period settings before creating a compliance-mode retention period. To override or remove governance-mode retention settings, a user must have the s3:BypassGovernanceRetention permission and must explicitly include x-amz-bypass-governance-retention:true as a request header with any request that requires overriding governance mode.

upvoted 2 times

...

wooyourdaddy

1 year ago

Selected Answer: CD

Gomer's link verifies this question. There is no such config for B.

upvoted 4 times

...