AWS
4 weeks subscription
4 weeks subscription
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Amazon Simple Queue Service Developer Guide<br />
Evaluation Logic<br />
If someone sends a request from Antarctica, the condition is met, and the policy's result is therefore an<br />
explicit deny.<br />
The distinction between a default deny and an explicit deny is important because a default deny can be<br />
overridden by an allow, but an explicit deny can't. For example, let's say there's another policy that allows<br />
requests if they arrive on June 1, 2010. How does this policy affect the overall outcome when coupled<br />
with the policy restricting access from Antarctica? We'll compare the overall outcome when coupling the<br />
date-based policy (we'll call Policy B) with the preceding policies A1 and A2. Scenario 1 couples Policy<br />
A1 with Policy B, and Scenario 2 couples Policy A2 with Policy B. The following figure and discussion<br />
show the results when a request comes in from Antarctica on June 1, 2010.<br />
API Version 2009-02-01<br />
41