---
title: "PUT /{accountId}/vaults/{vaultName}/access-policy"
method: PUT
path: "/{accountId}/vaults/{vaultName}/access-policy"
---

# PUT /{accountId}/vaults/{vaultName}/access-policy

`PUT /{accountId}/vaults/{vaultName}/access-policy`

This operation configures an access policy for a vault and will overwrite an existing policy. To configure a vault access policy, send a PUT request to the <code>access-policy</code> subresource of the vault. An access policy is specific to a vault and is also called a vault subresource. You can set one access policy per vault and the policy can be up to 20 KB in size. For more information about vault access policies, see <a href="https://docs.aws.amazon.com/amazonglacier/latest/dev/vault-access-policy.html">Amazon Glacier Access Control with Vault Access Policies</a>.

## Path parameters

- `accountId` string, required
- `vaultName` string, required

## Request body

- object
  - `policy` object — Contains the vault access policy.
    - `Policy` string — The vault access policy.

## Response `204`

Success

## Other responses

- `480` — ResourceNotFoundException
- `481` — InvalidParameterValueException
- `482` — MissingParameterValueException
- `483` — ServiceUnavailableException

---

[API](https://skmtc.net/aws/apis/glacier.md) · [All operations](https://skmtc.net/aws/apis/glacier/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/glacier/versions/7b30e085db54/schema)