Amazon S3 Object Lock variable retention with event holds is now available in AWS GovCloud (US) Regions
- Announced
- Tags
- amazon-s3
- Severity
- info, set by
reef/rss-rule-v1 - Source
- https://aws.amazon.com/about-aws/whats-new/2026/10/s3-object-lock-variable-retention-event-holds-aws-govcloud/
<p>Amazon S3 Object Lock support for variable retention with event holds is now available in AWS GovCloud (US-East) and AWS GovCloud (US-West).</p> <p>Amazon S3 Object Lock variable retention allows you to apply write-once-read-many (WORM) protection to objects whose required retention period starts with a future event, such as a contract closing or an audit completing. You place an event hold with a retention duration on an object and S3 protects the object while the hold is in place. When you release the hold, S3 retains the object for the duration you specified. Unlike legal holds, which end protection immediately upon removal, event holds provide WORM compliance for the required retention period after the triggering event, so you can meet event-based retention requirements without retaining data longer than your policy requires. <br> <br> To learn more, read the <a href="https://aws.amazon.com/blogs/storage/flexibly-control-amazon-s3-object-lock-retention-based-on-real-business-events" target="_blank" rel="noopener noreferrer">AWS Storage Blog post</a>, the <a href="https://aws.amazon.com/s3/features/object-lock/" target="_blank" rel="noopener noreferrer">S3 Object Lock overview page</a>, and the <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html" target="_blank" rel="noopener noreferrer">S3 documentation</a>. This capability has been <a href="https://d1.awsstatic.com/onedam/marketing-channels/website/aws/en_US/whitepapers/compliance/Amazon-S3-Compliance-Assessment-2026.pdf" target="_blank" rel="noopener noreferrer">assessed by Cohasset Associates</a> for use in environments subject to SEC Rule 17a-4(f), FINRA Rule 4511, and CFTC Regulation 1.31.</p>
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.