Use Case - Disallow deletion of bucket objects, regardless of IAM access
Retention policy will lock the bucket (or object in a bucket) and not allow deletion, regardless of access credentials.
In addition, once the bucket is locked, the retention policy cannot be altered.
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist. <a href="https://calendly.com/anujvarma/google-cloud-architect-initial-consultation">Initial Consultation</a>