Under Amazon S3, records can be kept under retention policies that specify the duration for which objects remain locked and cannot be deleted or overwritten. While the retention period can be set for any duration (minimum 1 day, no maximum), certain regulatory, compliance, or business requirements often mandate keeping records for specific periods like five years. For example, enforcing a five-year retention period ensures critical records remain tamper- proof until that time elapses. This is done using S3 Object Lock, which can be set in Governance or Compliance mode. Retention periods and legal holds prevent data from accidental or malicious deletion within the specified timeframe.

If the question relates specifically to compliance with regulations, some regulatory frameworks recommend or require keeping financial or other records for five years, but exact requirements depend on the context and industry.

In summary, under Amazon S3, specific records can be kept for five years by applying an appropriate retention policy using Object Lock functionality to meet compliance or business retention requirements.