---
title: "POST /{accountId}/vaults/{vaultName}/lock-policy"
method: POST
path: "/{accountId}/vaults/{vaultName}/lock-policy"
---

# POST /{accountId}/vaults/{vaultName}/lock-policy

`POST /{accountId}/vaults/{vaultName}/lock-policy`

This operation initiates the vault locking process by doing the following:

*   Installing a vault lock policy on the specified vault.
    
*   Setting the lock state of vault lock to `InProgress`.
    
*   Returning a lock ID, which is used to complete the vault locking process.
    

You can set one vault lock policy for each vault and this policy can be up to 20 KB in size. For more information about vault lock policies, see [Amazon Glacier Access Control with Vault Lock Policies](https://docs.aws.amazon.com/amazonglacier/latest/dev/vault-lock-policy.html).

You must complete the vault locking process within 24 hours after the vault lock enters the `InProgress` state. After the 24 hour window ends, the lock ID expires, the vault automatically exits the `InProgress` state, and the vault lock policy is removed from the vault. You call CompleteVaultLock to complete the vault locking process by setting the state of the vault lock to `Locked`.

After a vault lock is in the `Locked` state, you cannot initiate a new vault lock for the vault.

You can abort the vault locking process by calling AbortVaultLock. You can get the state of the vault lock by calling GetVaultLock. For more information about the vault locking process, [Amazon Glacier Vault Lock](https://docs.aws.amazon.com/amazonglacier/latest/dev/vault-lock.html).

If this operation is called when the vault lock is in the `InProgress` state, the operation returns an `AccessDeniedException` error. When the vault lock is in the `InProgress` state you must call AbortVaultLock before you can initiate a new vault lock policy.

## Path parameters

- `accountId` string, required
- `vaultName` string, required

## Request body

- object
  - `policy` object — Contains the vault lock policy.
    - `Policy` string — The vault lock policy.

## Response `201`

Success

- InitiateVaultLockOutput — Contains the Amazon S3 Glacier response to your request.

## Other responses

- `480` — ResourceNotFoundException
- `481` — InvalidParameterValueException
- `482` — MissingParameterValueException
- `483` — ServiceUnavailableException

---

[API](https://skmtc.net/aws/apis/glacier.md) · [All operations](https://skmtc.net/aws/apis/glacier/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/glacier/versions/7b30e085db54/schema)