AWS IAM · Question 11 of 12
A new IAM user without any attached policy tries to launch an EC2 instance. What happens and why?
1 answer is correct. Hard Created with AI
Show answer
Answer
- C The request is denied because everything is denied without an allow
Explanation
IAM works with an implicit deny: every action is denied until a policy explicitly allows it. Users are global and not tied to a Region, and there are no approval requests to root.