The service may be configured to lock an object or a bucket so that its objects cannot be overwritten or deleted until a retention period expires, and the lock itself may be made irrevocable.
Object Immutability
CCC.ObjStor.CP17
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.TH08 | Object Immutability is Bypassed or Expires Prematurely | An immutability lock may be applied in a mode that privileged identities can shorten or remove, with a retention period shorter than the record requires, or not applied to objects that require it. Objects intended to be write-once can then be overwritten or deleted. This results in a loss of integrity and availability of records that depend on the lock. |
| CCC.ObjStor.TH09 | Irrevocable Retention Prevents Required Deletion | An irrevocable immutability lock may be applied with an excessive retention period, or to a bucket holding data that is subject to deletion obligations. Neither users nor lifecycle rules can remove the objects until the period expires, and storage cost accrues for the full period. This results in retention of data that should no longer exist, impacting confidentiality and regulatory compliance. |