Hi @hiro12 

Enabling Object Lock on an S3 bucket after configuring the delivery settings should not affect the ongoing delivery of audit logs. But I would say, it is better to understand the root cause of the error.

The error you encountered when enabling Object Lock before configuring the delivery settings is due to insufficient permissions for the IAM role to perform the necessary S3 actions.

To avoid this error, ensure that the IAM role used for log delivery has all the required S3 actions as mentioned in the API documentation. Once the delivery settings are enabled, you can then enable Object Lock without causing any issues. The delivery process should continue to function correctly as long as the necessary permissions are in place.

Doc - https://docs.databricks.com/en/admin/account-settings/audit-log-delivery.html, https://docs.aws.amaz...

Thanks!