Skip to content

Instantly share code, notes, and snippets.

@khobbits
Created January 26, 2016 19:09
Show Gist options
  • Save khobbits/4083d76a41687f029b41 to your computer and use it in GitHub Desktop.
Save khobbits/4083d76a41687f029b41 to your computer and use it in GitHub Desktop.
Keep in mind that IAM policies themselves do not have a particular order that they are evaluated in, although, how a policy is evaluated can make a difference.
Polices are evaluated in the following:
-Implicit Deny
-Explicit Allow
-Explicit Deny
In this case, we have two explicit allows, one with a restriction and one without a restriction. The policy with the restriction will take precedence over the policy without the restriction (or rather, the restriction itself will take precedence).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment