Amazon Web Services → Microsoft Azure
Azure equivalent of Amazon S3 Object Lock
S3 Object Lock maps to immutable storage for Azure Blob Storage.
About Amazon S3 Object Lock
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | WORM protection for object versions, using retention periods (governance or compliance mode) and legal holds. Requires versioning. Assessed for SEC 17a-4, CFTC, and FINRA. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| WORM / immutable object storage | Immutable storage for Blob Storage (WORM) | Direct match |
Object tiers, lifecycle & protection(1)
WORM / immutable object storage Direct match
S3 Object Lock maps to immutable storage for Azure Blob Storage. Both support time-based retention and legal holds, and both are assessed for SEC 17a-4(f), CFTC, and FINRA.
- Modes. Object Lock has governance mode (users with special permission can bypass it) and compliance mode (nobody can shorten it, not even root). Azure time-based policies are unlocked (editable, for testing) or locked (can only be extended), which is closest to compliance mode.
- Scope. Object Lock applies per object version, with bucket defaults. Azure has container-level WORM and version-level WORM (account, container, or blob version).
- Versioning. Object Lock requires versioning. Azure version-level WORM requires versioning; container-level WORM doesn't.