---
type: post-synth-check
title: WAW063
description: IAM policy denies an action another attached policy on the same role allows — explicit Deny wins, runtime 403
id: WAW063
severity: error
category: post-synth
lexicon: aws
docs: https://intentius.io/chant/lexicons/aws/rules/
---
IAM policy denies an action another attached policy on the same role allows — explicit Deny wins, runtime 403

## Applies to

- [Action](/types/Action.md)
- [IamPolicy](/types/IamPolicy.md)
- [ManagedPolicy](/types/ManagedPolicy.md)
- [Role](/types/Role.md)
- [Type](/types/Type.md)