Created
January 26, 2016 19:09
-
-
Save khobbits/4083d76a41687f029b41 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Keep in mind that IAM policies themselves do not have a particular order that they are evaluated in, although, how a policy is evaluated can make a difference. | |
Polices are evaluated in the following: | |
-Implicit Deny | |
-Explicit Allow | |
-Explicit Deny | |
In this case, we have two explicit allows, one with a restriction and one without a restriction. The policy with the restriction will take precedence over the policy without the restriction (or rather, the restriction itself will take precedence). |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment