A team must retain selected objects against ordinary deletion for a specified period. Which control should be evaluated?

1. An appropriate Object Storage retention rule, considering its enforcement and locking implications.
2. A CPU alarm on the uploader.
3. Only a convention to put the word permanent in object names.
4. A private subnet for the uploading application as the only control.