Which solution will provide this functionality?
Turn on deletion protection on individual EBS snapshots that need to be kept.
Create an IAM policy that denies the deletion of EBS snapshots by using a condition statement for the snapshot age. Apply the policy to all users.
Create a Recycle Bin retention rule for EBS snapshots for the desired retention period.
Use Amazon EventBridge (Amazon CloudWatch Events) to schedule an AWS Lambda function to copy EBS snapshots to Amazon S3 Glacier.
Explanations:
Deletion protection can be enabled on EBS volumes, but it cannot be applied to individual snapshots. This option doesn’t provide a way to recover deleted snapshots.
While IAM policies can prevent snapshot deletion, they cannot retroactively restore deleted snapshots or provide a recovery mechanism.
The Recycle Bin feature for EBS snapshots allows users to recover deleted snapshots within a specified retention period, making it the best solution for the problem.
Using Amazon EventBridge and Lambda to copy snapshots to S3 Glacier is not a solution for recovering deleted snapshots; it is focused on backup and storage, not restoration.
As far as I’m aware, the answer is:
Create a Recycle Bin retention rule for EBS snapshots for the desired retention period.
If I had to guess, I’d say the answer is:
Create a Recycle Bin retention rule for EBS snapshots for the desired retention period.