S3 general purpose buckets should have versioning enabled

How to fix it

• Can't be undone: Versioning can later be suspended but never removed, so the bucket can never return to being unversioned.
• Affects another check: Enabling versioning brings the bucket into S3.10, which fails until it has an enabled lifecycle rule, such as one expiring noncurrent versions.
• Interrupts service: For up to 15 minutes after versioning is first enabled, reading an object written in that time can return 404 NoSuchKey, so AWS advises pausing writes.

In the console

S3 → the bucket → Properties → Bucket Versioning

Bucket Versioning

Enable

With the AWS CLI

aws s3api put-bucket-versioning --bucket <bucket-name> --versioning-configuration Status=Enabled

With Terraform

resource "aws_s3_bucket_versioning" "this" {
  bucket = var.bucket_name

  versioning_configuration {
    status = "Enabled"
  }
}