AWS Security Cookbook

How it works...

After we initiate a Vault Lock process, a Vault Lock policy is installed and we are provided with a Lock ID. We need to validate this policy and complete the lock process within 24 hours using the Lock ID. We then completed the Vault Lock process by providing the Lock ID. Once the Vault Lock process is completed, we cannot change the policy. If we do not complete the lock process within 24 hours, the Lock ID will expire and our policy will be deleted. We can also delete a Vault Lock before completion using the Delete Vault Lock button in the Vault Lock tab.