Acceptable use case of Allow and NotPrincipal

0

Is there an acceptable use case of "Effect: Allow" with NotPrincipal? I struggle to find a use case.

I understand the following, so I want to find an actual use case for Allow and NotPrincipal.

We strongly recommend that you do not use NotPrincipal in the same policy statement as "Effect": "Allow". Doing so allows all principals except the one named in the NotPrincipal element. We do not recommend this because the permissions specified in the policy statement will be granted to all principals except for the ones specified. By doing this, you might grant access to anonymous (unauthenticated) users.

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notprincipal.html

smoy
已提問 2 年前檢視次數 82 次
沒有答案

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南