A company is storing data in Amazon S3 Glacier.

Comprehensive and Detailed 100to 150 words of Explanation From AWS Certified Security – Specialty topics:

Amazon S3 Glacier Vault Lock has a 24-hour in-progress period after initiate-vault-lock is called. During this period, the lock is not yet immutable, and AWS allows the vault lock process to be aborted. Since the security engineer discovered the typo only 12 hours after initiation, the most cost-effective correction is to abort the current vault lock, fix the policy, and initiate the vault lock process again. Copying 10 TB of data to a new location is unnecessary, expensive, and operationally wasteful. Updating the policy without aborting does not correctly resolve a vault lock policy in progress. Once the lock is completed, the policy becomes immutable, so action must be taken before completion.

================