Tag: Question 147

AWS Certified Solutions Architect – Professional SAP-C01 – Question147

If no explicit deny is found while applying IAM's Policy Evaluation Logic, the enforcement code looks for any ______ instructions that would apply to the request.

A. "cancel"
B. "suspend"
C. "allow”
D. "valid"

Correct Answer: C

Explanation:

Explanation: If an explicit deny is not found among the applicable policies for a specific request, IAM’s Policy Evaluation Logic checks for any “allow” instructions to check if the request can be successfully completed.
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPolicyLanguag…