AWS - Identity and Access Management
Why does AWS IAM policy evaluation always result in an implicit deny if no explicit allow is found?
Why does AWS IAM policy evaluation always result in an implicit deny if no explicit allow is found?
hard📝 Conceptual Q10 of 15
Step-by-Step Solution
Solution:
Step 1: Understand IAM security principle
IAM uses least privilege, denying all actions unless explicitly allowed.Step 2: Explain implicit deny purpose
This ensures users have only permissions they need, improving security.Final Answer:
Implicit deny enforces least privilege -> Option CQuick Check:
Implicit Deny = Least Privilege [OK]
Quick Trick: Implicit deny protects by default, allowing only explicit permissions [OK]
Common Mistakes:
- Thinking AWS trusts users by default
- Believing allow is default
- Confusing deny and allow roles
Master "Identity and Access Management" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes