# Ensure Lightsail Bucket versioning is enabled

- Source: https://support.icompaas.com/support/solutions/articles/62000220073-ensure-lightsail-bucket-versioning-is-enabled
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Security Controls](https://support.icompaas.com/support/solutions/62000065178) › [Amazon Lightsail](https://support.icompaas.com/support/solutions/folders/62000167575)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

### Description:

Lightsail provides object storage called a bucket that is used to store your data. You can add objects to your bucket by uploading files using the Lighsail console or by configuring your application to put content like logs or other application data in the bucket.

  

**Rational:**

Versioning allows you to preserve, retrieve, and restore every version of every object storage in your bucket, providing an additional level of protection from accidental overwrites and deletes.

  

**Impact:**

The versioning state applies to all of the objects in that bucket. When you enable versioning in a bucket, all new objects are versioned and given a unique version ID. Objects that already existed in the bucket at the time versioning was enabled will thereafter _always_ be versioned and given a unique version ID when they are modified by future requests. 

  

**Default Value:**

By default, versioning is disabled.

  

**Audit:**

1.  Sign in to AWS Management console
    
2.  Go to the Lightsail service at [https://lightsail.aws.amazon.com/](https://lightsail.aws.amazon.com/ "https://lightsail.aws.amazon.com/")
    
3.  Select the storage tab and choose the bucket and click on it to examine
    
4.  Go to the versioning tab and check whether it’s enabled or disabled  
    ![](https://support.icompaas.com/assets/kb/bfadf20069081aef.png)
    
    If you notice versioning is disabled, follow the implementation steps.
    

  

**Remediation:**

Pre-requisites:

-   Sign in as admin or IAM user with required permissions
    

  

Implementation steps:

1.  Sign in to AWS Management console
    
2.  Go to the Lightsail service at [https://lightsail.aws.amazon.com/](https://lightsail.aws.amazon.com/ "https://lightsail.aws.amazon.com/")
    
3.  Select the storage tab and choose the bucket and click on it to enable versioning
    
4.  Go to the versioning tab and click on the toggle button to enable the versioning  
    ![](https://support.icompaas.com/assets/kb/950628139d96e88f.png)
    

Via CLI:

update-bucket
--bucket-name <value>
\[--versioning <value>\]

**Backout plan:**

1.  **S**ign in to AWS Management console
    
2.  Go to the Lightsail service at [https://lightsail.aws.amazon.com/](https://lightsail.aws.amazon.com/ "https://lightsail.aws.amazon.com/")
    
3.  Select the storage tab and choose the bucket and click on it to disable versioning
    
4.  Go to the versioning tab and click on the toggle button to turn off the versioning
    

  

**Reference:**

****[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")**[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")**[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")[https://aws.amazon.com/lightsail/](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")

[https://docs.aws.amazon.com/cli/latest/reference/lightsail/update-bucket.html](https://docs.aws.amazon.com/cli/latest/reference/lightsail/update-bucket.html)[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")**[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")**[](https://aws.amazon.com/lightsail/ "https://aws.amazon.com/lightsail/")****

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.