A CloudFormation stack contains an S3 bucket with retained audit data. The stack will be deleted, but the bucket and its contents must remain available outside CloudFormation management. Which resource attribute directly expresses this requirement?

1. UpdateReplacePolicy: Delete as the only resource attribute.
2. Enable S3 Versioning but leave the bucket without a CloudFormation retention policy.
3. DeletionPolicy: Retain on the bucket resource.
4. A stack policy that denies Update:Modify for the bucket.