Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management?

Answer options:

A.An explicit deny does not override an explicit allow.
B.By default, all requests are allowed.
C.An explicit allow overrides default deny.
D.An explicit allow overrides an explicit deny.
E.By default, all requests are denied.

Answer - C and E
Option A is incorrect because explicit deny always overrides an explicit allow.
Option B is incorrect because all requests are denied by default.
Option C is CORRECT because an explicit allow overrides the default deny.
Option D is incorrect because explicit deny cannot be overridden by an explicit allow.
Option E is CORRECT because all requests are denied by default.
The below diagram shows the evaluation logic of IAM policies. And as per the evaluation logic, it is clear that the above scenario leads to a default deny.
For more information on the IAM policy evaluation logic, please refer to the link-
http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html