AWS Certified Solutions Architect - Associate (SAA-C02)

Sign Up Free or Log In to participate!

Service Control Policies vs User policies

If the SCP is applied to the account with a condition that no one can create or terminate EC2 instances AND there is a user policy applied to the user which allows the user to create or terminate the EC2 then which one is given the preference ? Thank You.

Basically which one has the priority SCP or User level policies via IAM ?

1 Answers

SCPs limit what IAM policies effectively do.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?