Policyevaluation

Policy Evaluation Logic

• The evaluation logic needs to consider -
• Explicit Deny
• Organization SCPs
• Resource Policies
• IAM Permissions Boundaries
• Session Policies
• Identity Policies