Skip to content

    ← All posts

    An Allow is not enough: IAM still says no

    A deploy role that is allowed s3:PutObject still gets AccessDenied. We replay the request in the IAM policy simulator, one layer at a time: implicit deny, permissions boundary, explicit Deny on aws:SecureTransport, organization SCPs.

    Spotted an error, something to add?

    Tell me: I read every message and correct the article when needed.

    Your name only appears below the article with this consent, and only if the remark is used. Your address is never published.