mykter/aws-security-cert-service-notes

Security aspects of AWS products for the Security Specialist certification

aws-security-cert-service-notes's Issues

Error in KMS Section

This below is incorrect, evaluation IS the same as standard IAM logic. If they key policy doesn't deny and the IAM policy allows, its allowed, even if the key policy doesn't specifically allow it.

KMS
Key policies
Required. Also different evaluation logic to standard IAM - if the key policy doesn't allow, then the request is denied regardless of identity policies.