Object tiers, lifecycle & protection
Amazon S3 Object Lock vs Immutable storage for Blob Storage (WORM)
S3 Object Lock maps to immutable storage for Azure Blob Storage.
Both support time-based retention and legal holds, and both are assessed for SEC 17a-4(f), CFTC, and FINRA.
Side-by-side comparison
| Aspect | Amazon Web Services | Microsoft Azure |
|---|---|---|
| Service | Amazon S3 Object Lock | Immutable storage for Blob Storage (WORM) |
| Lifecycle | Generally available | Generally available |
| What it is | WORM protection for object versions, using retention periods (governance or compliance mode) and legal holds. Requires versioning. Assessed for SEC 17a-4, CFTC, and FINRA. | Time-based retention policies (unlocked or locked) and legal holds, set at the container level or, with version-level WORM, on the account, container, or individual blob versions. Helps address SEC 17a-4(f), CFTC 1.31(d), and FINRA. |
| Pricing model | No extra charge beyond storage and requests. | No extra charge beyond storage and operations. |
| Docs | Amazon S3 Object Lock docs | Immutable storage for Blob Storage (WORM) docs |
| Pricing page | Amazon S3 Object Lock pricing | Immutable storage for Blob Storage (WORM) pricing |
| Exams | SAA-C03 SCS-C03 | AZ-104 AZ-305 |
Key differences
- Modes. Object Lock has governance mode (users with special permission can bypass it) and compliance mode (nobody can shorten it, not even root). Azure time-based policies are unlocked (editable, for testing) or locked (can only be extended), which is closest to compliance mode.
- Scope. Object Lock applies per object version, with bucket defaults. Azure has container-level WORM and version-level WORM (account, container, or blob version).
- Versioning. Object Lock requires versioning. Azure version-level WORM requires versioning; container-level WORM doesn't.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- No extra charge beyond storage and requests. Amazon S3 Object Lock pricing →
- Azure
- No extra charge beyond storage and operations. Immutable storage for Blob Storage (WORM) pricing →
Certification exam mapping
| Exam | Provider | Level | Status |
|---|---|---|---|
| AWS Certified Solutions Architect – Associate SAA-C03 | AWS | Associate | current Italian version retires after Dec 31, 2026. |
| AWS Certified Security – Specialty SCS-C03 | AWS | Specialty | current The current code (SCS-C03) is taken from the exam-prep link on the official certification page. Simplified Chinese, Spanish (Latin America), and Portuguese (Brazil) versions retire after Dec 31, 2026. |
| Microsoft Certified – Azure Administrator Associate AZ-104 | Azure | Associate | current |
| Microsoft Certified – Azure Solutions Architect Expert AZ-305 | Azure | Expert | current English version updated Apr 17, 2026. |
Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.
FAQ
What is the Azure equivalent of Amazon S3 Object Lock?
S3 Object Lock maps to immutable storage for Azure Blob Storage. Both support time-based retention and legal holds, and both are assessed for SEC 17a-4(f), CFTC, and FINRA.
How does pricing compare between Amazon S3 Object Lock and Immutable storage for Blob Storage (WORM)?
AWS: No extra charge beyond storage and requests. Azure: No extra charge beyond storage and operations. Check the official pricing pages for current rates.
Which certification exams cover this topic?
AWS Certified Solutions Architect – Associate (SAA-C03); AWS Certified Security – Specialty (SCS-C03); Microsoft Certified – Azure Administrator Associate (AZ-104); Microsoft Certified – Azure Solutions Architect Expert (AZ-305).