iam-explicit-deny-always-wins

Status: IN

An explicit deny in any applicable IAM policy type always overrides any allow from any other policy type.

Source: entries/2026/03/08/iam-policies.md

JSON