Enforce WORM Compliance on GCS with Bucket Lock Retention and Versioned Soft-Delete
Enable GCS Bucket Lock with a locked default retention period and versioning to enforce WORM compliance. Covers prerequisites, gsutil steps to set and lock retention, validation via audit logs, and recovery limits when a policy is locked.