Contains information that denied the authorization.
Information that explicitly denies the authorization.
Information that implicitly denies the authorization. When a policy doesn't explicitly deny or allow an action on a resource it is considered an implicit deny.