AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam

Access More Questions

An IAM policy contains the following statement: `{"Effect": "Deny", "Action": "s3:DeleteObject", "Resource": "*"}`. A user has another policy that grants `s3:DeleteObject`. What happens when the user attempts to delete an S3 object?

The delete succeeds because the Allow policy takes precedence The delete is denied because Deny always overrides Allow The outcome depends on which policy was created first The delete succeeds only if the user is an IAM admin

Correct Answer:

The delete is denied because Deny always overrides Allow

Access more questions from this quiz

Continue to AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam for more practice questions and the full quiz experience.

Access More Questions