S3 Glacier Vault Lock is fairly simple. It allows you to prevent deletion and editing of all objects in your S3 bucket. This is useful for compliance reasons and even administrator accounts will be unable to delete objects. S3 object lock is a little more in depth. This allows you to lock down the ability to delete and edit on the object level. You have two retention modes. First off we have compliance retention mode, this allows no editing or deletion and the retention period cannot be changed. Now we have the governance retention mode allows for certain users to update and change the retention period as well as delete objects.