Do we need Object Lock for PHI? HIPAA S3 retention: Object Lock compliance mode is not optional
вњ“ Human-authored analysis; AI used for formatting and proofreading. The thread repeats on r/aws: a team stores Protected Health Information (PHI) in S3, has versioning enabled, and assumes that's sufficient for retention. Someone suggests Object Lock. The team pushes back. It's complex and they already have lifecycle
