Resource-based policy examples for Amazon S3 Glacier
A S3 Glacier vault can have one vault access policy and one Vault Lock policy associated with it. A Amazon S3 Glacier vault access policy is a resource-based policy that you can use to manage permissions to your vault. A Vault Lock policy is vault access policy that can be locked. After you lock a Vault Lock policy, the policy can't be changed. You can use a Vault Lock Policy to enforce compliance controls.