- Introduces event holds for S3 Object Lock, enabling variable, event‑triggered WORM retention periods.
- Supports per‑object, bucket‑default, and Batch Operations holds with new IAM and bucket policy condition keys to control permissions and enforce duration limits.
- All hold actions are logged in CloudTrail, inventory reports expose hold status, and the feature is available globally at no extra charge.