Which solution will meet these requirements?
Set up Amazon S3 Cross-Region Replication and run daily updates.
Set up Amazon S3 Object Lock in governance mode with S3 Versioning enabled.
Set up Amazon S3 Object Lock in compliance mode with S3 Versioning enabled.
Set up an Amazon S3 Lifecycle policy to move the objects to Amazon S3 Glacier.
Explanations:
Amazon S3 Cross-Region Replication is used to replicate objects between S3 buckets across regions, but it does not prevent object deletion or modification. It does not meet the write-once, read-many (WORM) requirement.
S3 Object Lock in governance mode allows administrators to delete or modify objects during the retention period, which does not satisfy the requirement of preventing changes or deletions, even by administrators.
S3 Object Lock in compliance mode ensures that objects cannot be deleted or modified for the duration of the retention period, even by root users or administrators, making it suitable for WORM storage.
S3 Lifecycle policies are used to transition objects between storage classes, but they do not provide WORM functionality or prevent object deletions or modifications.
I appraise that the answer is:
Set up Amazon S3 Object Lock in compliance mode with S3 Versioning enabled.