An object lock policy lets you set a retention period on an object or bucket to prevent deletion during that time. It uses write-once, read-many (WORM) protection and supports two modes: governance, which allows certain users to override retention settings, and compliance, which strictly blocks deletion or modification until the period expires. You can also apply legal holds to stop deletion indefinitely.