Vendor lock-in occurs when an organisation heavily depends on a specific cloud provider's services and struggles to migrate to another platform. It's a concern because it limits flexibility and can increase costs.