Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? (Choose two.)
A) By default, all requests are denied
B) An explicit allow overrides an explicit deny
C) An explicit allow overrides default deny.
D) An explicit deny does not override an explicit allow
E) By default, all request are allowed

Question

Quizplus · Accepted Answer

By default, all requests are denied in AWS IAM, which is the default deny. An explicit allow can override this default deny, but an explicit deny will always override an explicit allow.

Which of the Following Are Correct Statements with Policy Evaluation