Effect:Allow
with a NotPrincipal
. A configuration like this allows global access to that object with the specified actions to all entities except the specified NotPrincipal
. It is very rare to need to use a NotPrincipal
, and using a NotPrincipal
with an Effect:Allow
is almost always an incorrect configuration.NotPrincipal
with an Effect:Allow
, either by removing the grant entirely or re-writing it correctly.