A bucket contains regulated records that must not be deleted during a defined retention period. Which Object Storage capability should be assessed against the requirement?

1. Retention rules with appropriate governance and lock decisions
2. A lifecycle rule that immediately deletes every object
3. A naming convention that includes the word permanent
4. A public object URL with no retention control