What delegation permission is required to governance mode ?
For S3 Object Lock governance mode, the required delegation permission is s3:BypassGovernanceRetention. It lets an IAM principal override, shorten, or remove a governance-mode retention setting, or delete an object version before its retain-until date
