Flexibly control Amazon S3 Object Lock retention based on real business events

This article explains Amazon S3 Object Lock's variable retention feature, which enables retention periods triggered by business events rather than predetermined dates.

• Variable retention uses event holds and configurable durations to protect data until triggering events occur
• Retain-until-date dynamically computes as current time plus duration while hold is active, advancing automatically
• Releasing the hold fixes the retain-until-date at release time plus duration, starting the countdown in compliance mode
• Supports contract retention workflows where records must stay protected until contracts end, regardless of timing
• Enables ransomware recovery windows by setting 30-day default retention on all new object versions
• Separates hold release from deletion, allowing two-person approval with S3-enforced waiting periods
• Works with S3 Batch Operations to migrate existing archives from rolling extension schedules
• Integrates with CloudTrail, S3 Inventory, and S3 Storage Lens for monitoring and auditing
• Available in all AWS Regions at no additional charge; billed as standard PUT requests

Variable retention eliminates the need for scheduled retention extension jobs while ensuring data remains protected until business obligations end and stops incurring storage charges afterward.