text: Next, if the principal does have an attached policy, and there is an explicit allow, the implicit deny 
  
  is overridden. However, an explicit deny in any policy overrides any allows. In complex situations, 
  there can be additional steps, but the following diagram represents this simpliﬁed model of how 
  
  IAM evaluates identity based policies: 