An application generates audit logs of operational activities. Compliance requirements mandate that the application retains the logs for 5 years.

Save the logs in an Amazon S3 bucket and enable Multi-Factor Authentication Delete (MFA Delete) on the bucket.

Save the logs in an Amazon EFS volume and use Network File System version 4 (NFSv4) locking with the volume.

Save the logs in an Amazon Glacier vault and use the Vault Lock feature.

Save the logs in an Amazon EBS volume and take monthly snapshots.