19.08.2018 Views

sqs-dg-2009-02-01

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Amazon Simple Queue Service Developer Guide<br />

Evaluation Logic<br />

If someone sends a request from Antarctica, the condition is met, and the policy's result is therefore an<br />

explicit deny.<br />

The distinction between a default deny and an explicit deny is important because a default deny can be<br />

overridden by an allow, but an explicit deny can't. For example, let's say there's another policy that allows<br />

requests if they arrive on June 1, 2<strong>01</strong>0. How does this policy affect the overall outcome when coupled<br />

with the policy restricting access from Antarctica? We'll compare the overall outcome when coupling the<br />

date-based policy (we'll call Policy B) with the preceding policies A1 and A2. Scenario 1 couples Policy<br />

A1 with Policy B, and Scenario 2 couples Policy A2 with Policy B. The following figure and discussion<br />

show the results when a request comes in from Antarctica on June 1, 2<strong>01</strong>0.<br />

API Version <strong>2009</strong>-<strong>02</strong>-<strong>01</strong><br />

41

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!