Status: IN
AWS Backup Vault Lock has two modes: Governance (removable by users with sufficient IAM permissions) and Compliance (immutable after grace time expires); the `ChangeableForDays` parameter creates Compliance mode, omitting it creates Governance mode.
Source: entries/2026/03/12/aws-backup-latest-devguide-vault-lockhtml.md