How to Remove an AWS S3 Bucket with Object Lock Enabled

Select Language:

If you need to delete an S3 bucket but are running into issues despite having full permissions, here’s a simple guide to help you resolve the problem.

First, verify the bucket’s retention settings. Sometimes, objects within the bucket are protected due to retention policies, preventing deletion. To check this, you can use the AWS CLI command to see if any retention modes are active on your objects. For example:

aws s3api get-object-retention –bucket [your-bucket-name] –key [your-object-key]

Replace [your-bucket-name] and [your-object-key] with the actual bucket name and file path. If the response shows a retention mode like “COMPLIANCE” with a future date, the object is locked to prevent deletion until that date.

Additionally, check if there’s a legal hold on the object, which also prevents deletion. Run:

aws s3api get-object-legal-hold –bucket [your-bucket-name] –key [your-object-key]

If the command reports that there is no object lock configuration, it’s not related to legal holds. However, if there is an active retention, you will need to remove or modify the retention settings before deletion.

If the objects are under retention, contact your AWS administrator or security team to help remove these restrictions, as they are designed to prevent accidental data loss. Once all retention policies and legal holds are cleared, you should be able to delete the objects inside the bucket. Afterward, delete the bucket itself through the AWS Management Console or CLI.

Remember, always ensure you have the proper permissions and have reviewed retention policies before attempting to delete data. If you’re unsure or face any errors, reaching out to your AWS support or team responsible for data governance can make the process smoother.