This page is only for existing customers of the S3 Glacier service using Vaults and the original REST API from 2012.
If you're looking for archival storage solutions we suggest using the S3 Glacier storage classes in Amazon S3, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive. To learn more about these storage options, see S3 Glacier storage classes
Complete Vault Lock (POST lockId)
Description
This operation completes the vault locking process by transitioning the vault lock from
the InProgress
state to the Locked
state, which causes the vault
lock policy to become unchangeable. A vault lock is put into the InProgress
state by calling Initiate Vault Lock (POST lock-policy). You can obtain the state of the vault lock by
calling Get Vault Lock (GET lock-policy). For more
information about the vault locking process, see S3 Glacier Vault Lock.
This operation is idempotent. This request is always successful if the vault lock is in
the Locked
state and the provided lock ID matches the lock ID originally used
to lock the vault.
If an invalid lock ID is passed in the request when the vault lock is in the
Locked
state, the operation returns an AccessDeniedException
error. If an invalid lock ID is passed in the request when the vault lock is in the
InProgress
state, the operation throws an InvalidParameter
error.
Requests
To complete the vault locking process, send an HTTP POST
request to the URI
of the vault's lock-policy
subresource with a valid lock ID.
Syntax
POST /
AccountId
/vaults/vaultName
/lock-policy/lockId
HTTP/1.1 Host: glacier.Region
.amazonaws.com Date:Date
Authorization:SignatureValue
Content-Length:Length
x-amz-glacier-version: 2012-06-01
Note
The AccountId
value is the AWS account ID. This value must match the AWS account ID associated with the credentials used to sign the request. You can either specify an AWS account ID or optionally a single '-
' (hyphen), in which case Amazon S3 Glacier uses the AWS account ID associated with the credentials used to sign the request.
If you specify your account ID, do not include any hyphens ('-') in the ID.
The lockId
value is the lock ID obtained from a Initiate Vault Lock (POST lock-policy)
request.
Request Parameters
Request Headers
This operation uses only request headers that are common to all operations. For information about common request headers, see Common Request Headers.
Request Body
This operation does not have a request body.
Responses
If the operation request is successful, the service returns an HTTP 204 No
Content
response.
Syntax
HTTP/1.1 204 No Content x-amzn-RequestId: x-amzn-RequestId Date: Date
Response Headers
This operation uses only response headers that are common to most responses. For information about common response headers, see Common Response Headers.
Response Body
This operation does not return a response body.
Errors
For information about Amazon S3 Glacier exceptions and error messages, see Error Responses.
Examples
Example Request
The following example sends an HTTP POST request with the lock ID to complete the vault locking process.
POST /-/vaults/examplevault/lock-policy/AE863rKkWZU53SLW5be4DUcW HTTP/1.1 Host: glacier.us-west-2.amazonaws.com x-amz-Date: 20170210T120000Z Authorization: AWS4-HMAC-SHA256 Credential=AKIAIOSFODNN7EXAMPLE/20141123/us-west-2/glacier/aws4_request,SignedHeaders=host;x-amz-date;x-amz-glacier-version,Signature=9257c16da6b25a715ce900a5b45b03da0447acf430195dcb540091b12966f2a2 Content-Length:
length
x-amz-glacier-version: 2012-06-01
Example Response
If the request was successful, Amazon S3 Glacier (S3 Glacier) returns an HTTP 204 No
Content
response, as shown in the following example.
HTTP/1.1 204 No Content x-amzn-RequestId: AAABZpJrTyioDC_HsOmHae8EZp_uBSJr6cnGOLKp_XJCl-Q Date: Wed, 10 Feb 2017 12:02:00 GMT
Related Sections
See Also
For more information about using this API in one of the language-specific Amazon SDKs, see the following: