How does IAM evaluate a request when policies conflict?
- A An explicit Deny always wins; otherwise an explicit Allow is required
- B The most recent policy wins
- C Allow always overrides Deny
- D The policy with the longest name wins
Answer
An explicit Deny always wins; otherwise an explicit Allow is required
The default is implicit deny, so access must be explicitly granted and can be explicitly revoked at a higher level.





