Amazon
CLF-C02 · Question #763
A newly created IAM user has no IAM policy attached. What will happen when the user logs in and attempts to view the AWS resources in the account?
The correct answer is B. Access to all AWS resources will be denied.. By default, IAM enforces a deny-all policy; without any attached permissions (policies), the user has no access to view or interact with AWS resources.
Submitted by haruto_sh· Mar 6, 2026Security and Compliance
Question
A newly created IAM user has no IAM policy attached. What will happen when the user logs in and attempts to view the AWS resources in the account?
Options
- AAll AWS services will be read-only access by default.
- BAccess to all AWS resources will be denied.
- CAccess to the AWS billing services will be allowed.
- DAccess to AWS resources will be allowed through the AWS CLI.
How the community answered
(55 responses)- A4% (2)
- B73% (40)
- C15% (8)
- D9% (5)
Explanation
By default, IAM enforces a deny-all policy; without any attached permissions (policies), the user has no access to view or interact with AWS resources.
Community Discussion
No community discussion yet for this question.