[Security and Compliance] A company migrates a write-once, read-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in…

When using Amazon S3 Object Lock configured in governance mode, deleting objects before their

retention period ends requires specific permissions. To bypass these governance restrictions, the

administrator must:

C: Assume a role that has the s3:BypassGovernanceRetention permission. This permission allows the

role to override the governance mode restrictions.

D: Include the x-amz-bypass-governance-retention:true header in the delete request. This header is

necessary to programmatically bypass the governance retention settings when making a delete

request via the AWS CLI or SDK. These steps enable the deletion of objects under governance mode

retention without waiting for the retention period to expire, addressing the need to remove

unintended data uploads effectively. For further details, refer to the AWS documentation on S3

Object Lock Amazon S3 Object Lock.