AWS - Identity and Access Management
What happens if an AWS IAM policy has both an explicit
Allow and an explicit Deny for the same action?What happens if an AWS IAM policy has both an explicit Allow and an explicit Deny for the same action?
easy📝 Conceptual Q11 of 15
Step-by-Step Solution
Solution:
Step 1: Understand explicit Deny effect
In AWS IAM, an explicit Deny always takes priority over any Allow for the same action.Step 2: Apply policy evaluation logic
Even if a policy allows an action, if another policy explicitly denies it, the Deny wins and the action is blocked.Final Answer:
The explicit Deny always overrides the Allow. -> Option AQuick Check:
Explicit Deny > Allow [OK]
Quick Trick: Remember: Deny always beats Allow in AWS policies [OK]
Common Mistakes:
MISTAKES- Thinking Allow can override Deny
- Ignoring explicit Deny effect
- Assuming conditions affect Deny priority
Master "Identity and Access Management" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes