{"id":"iam-notaction-allow-grants-all-except-listed","text":"The `NotAction` element with `\"Effect\": \"Allow\"` grants access to all services except the listed ones — commonly used for power-user policies that exclude IAM/Organizations.","truth_value":"IN","source":"entries/2026/03/11/IAM-latest-UserGuide-access_policies_access-advisor-example-scenarioshtml.md","source_url":"","source_hash":"0a50676e2446511c","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-notaction-allow-grants-all-except-listed","truth_value":"IN","reason":"premise"}]}}