The service always denies access to every resource unless a permission has been explicitly granted to the requesting identity.
Deny Permissions by Default
CCC.IAM.CP17
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.IAM.TH02 | Overly-Permissive IAM Policy | An access control policy attached to an identity or a resource is configured with excessive permissions, violating the principle of least privilege. This can enable unauthorized data access, privilege escalation, or other unintended actions by principals whose credentials might be compromised or who are acting erroneously. |