
Ultimate access to all questions.
A user has both an IAM policy and an Amazon SQS policy associated with their account. The IAM policy grants the user permission to perform the ReceiveMessage action on a queue named example_queue. Meanwhile, the Amazon SQS policy permits the user to execute the SendMessage action on the same queue.
Given the permissions provided by these policies, which of the following statements are correct? (Select two)_
A
The user can send a ReceiveMessage request to example_queue, the IAM policy allows this action_
B
If you add a policy that denies the user access to all actions for the queue, the policy will override the other two policies and the user will not have access to example_queue_
C
If the user sends a SendMessage request to example_queue, the IAM policy will deny this action_
D
Either of IAM policies or Amazon SQS policies should be used to grant permissions. Both cannot be used together
E
Adding only an IAM policy to deny the user of all actions on the queue is not enough. The SQS policy should also explicitly deny all action