09.06.2017 Views

hello123

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Amazon Simple Queue Service Developer Guide<br />

Evaluation Logic<br />

If someone sends a request from Antarctica, the condition is met, and the policy's result is therefore an<br />

explicit deny.<br />

The distinction between a default deny and an explicit deny is important because a default deny can be<br />

overridden by an allow, but an explicit deny can't. For example, let's say there's another policy that allows<br />

requests if they arrive on June 1, 2010. How does this policy affect the overall outcome when coupled<br />

with the policy restricting access from Antarctica? We'll compare the overall outcome when coupling the<br />

date-based policy (we'll call Policy B) with the preceding policies A1 and A2. Scenario 1 couples Policy<br />

A1 with Policy B, and Scenario 2 couples Policy A2 with Policy B. The following figure and discussion<br />

show the results when a request comes in from Antarctica on June 1, 2010.<br />

API Version 2009-02-01<br />

41

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!