Use S3 "object lock" for objects in published versions

[waxlamp]

This would be an S3-level protection against accidental deletion of objects that are part of published version (and thus generally should not be deleted).

https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html

The "legal hold" mechanism seems to be what we would want:

You can use Legal Hold when you are not sure for how long you want your objects to stay immutable. This could be because you have an upcoming external audit of your data and want to keep objects immutable till the audit is complete. Alternately, you may have an ongoing project utilizing a dataset that you want to keep immutable until the project is complete.