AWS IAM · Question 11 of 12

A new IAM user without any attached policy tries to launch an EC2 instance. What happens and why?

1 answer is correct. Hard Created with AI

Show answer

Answer

  • C The request is denied because everything is denied without an allow

Explanation

IAM works with an implicit deny: every action is denied until a policy explicitly allows it. Users are global and not tied to a Region, and there are no approval requests to root.

Certifications & exams

Which exam comes next?

You can already practise for 31 exams, and 20 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications