Home » Amazon » AWS DevOps Engineer Professional v.2 » To override an allow in an IAM policy, you set the Effect element to ______.
To override an allow in an IAM policy, you set the Effect element to ______.
A. Block
B. Stop
C. Deny
D. Allow
Correct Answer: C
Explanation/Reference:
Explanation:
By default, access to resources is denied. To allow access to a resource, you must set the Effect element to Allow. To override an allow (for example, to override an allow that is otherwise in force), you set the Effect element to Deny.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPolicyLanguage_ElementDescriptions.html
