Use Case - Disallow deletion of bucket objects, regardless of IAM access

Retention policy will lock the bucket  (or object in a bucket) and not allow deletion, regardless of access credentials.

In addition, once the bucket is locked, the retention policy cannot be altered.