Legal hold
A lock with no end date. It stays until you remove it.
A legal hold stops a file version from being deleted or overwritten, like a retention, but it has no end date. It stays until someone turns it off. Use it to keep files during a dispute, an audit or an investigation, for as long as needed.
A legal hold works on its own or together with a Governance or Compliance retention. While the hold is on, the version cannot be deleted, even if its retention has ended. Legal holds work only in buckets with Object Lock, and you set them on one version at a time.
Turn on a legal hold
Open the bucket and turn on Show Versions. Open the version's ⋮ menu and select Lock Settings.
In Version Details, turn on the Legal Hold switch.
In Enable Legal Hold, select Confirm.
Turn off a legal hold
Turn off the Legal Hold switch in the version's Lock Settings and select Confirm in Disable Legal Hold. The version can then be deleted, unless a retention still applies.
Deleting a version on hold
While the hold is on, nobody can delete the version. The console shows Legal Hold Active and only lets you close the window.
Use the AWS CLI
# Turn the hold on
aws s3api put-object-legal-hold --bucket my-locked-bucket --key myfile.txt --legal-hold Status=ON --profile zata
# Turn it off
aws s3api put-object-legal-hold --bucket my-locked-bucket --key myfile.txt --legal-hold Status=OFF --profile zata