A company needs audit objects in S3 to resist deletion and shortening of their protected retention period, including by privileged account users. Which S3 feature and mode should it evaluate for the documented retention policy?

1. S3 Versioning alone, with unrestricted permission to permanently delete every version.
2. A bucket lifecycle expiration rule with no lock or retention control.
3. Object Lock governance mode while granting every user permission to bypass governance retention.
4. S3 Object Lock in compliance mode on a correctly configured versioned bucket, with the required object retention settings.