[Solved] If an IAM user has the following policy:{"Effect": "Deny", "Action": "ec2:TerminateInstances", "Resource": "*"}What happens when the user tries to terminate an EC2 instance? | AWS

AWS - Identity and Access Management

If an IAM user has the following policy:

{"Effect": "Deny", "Action": "ec2:TerminateInstances", "Resource": "*"}

What happens when the user tries to terminate an EC2 instance?

AThe user receives an error due to syntax

BThe termination request is allowed

CThe user can terminate only instances they own

DThe termination request is denied

Step-by-Step Solution

Solution:

Step 1: Understand Deny effect in IAM policies
A Deny effect explicitly blocks the specified action regardless of other permissions.
Step 2: Check action and resource
The action 'ec2:TerminateInstances' is denied on all resources (*) for this user.
Final Answer:
The termination request is denied -> Option D
Quick Check:
Deny overrides allow = C [OK]

Quick Trick: Explicit Deny always blocks the action [OK]

Common Mistakes:

MISTAKES

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

If an IAM user has the following policy: