iam-notaction-allow-grants-all-except-listed

Status: IN

The `NotAction` element with `"Effect": "Allow"` grants access to all services except the listed ones — commonly used for power-user policies that exclude IAM/Organizations.

Source: entries/2026/03/11/IAM-latest-UserGuide-access_policies_access-advisor-example-scenarioshtml.md

JSON