diff --git a/terraform/iam-test.tf b/terraform/iam-test.tf
index 02b96b3..996ebf8 100644
--- a/terraform/iam-test.tf
+++ b/terraform/iam-test.tf
@@ -10,7 +10,7 @@ resource "aws_iam_policy" "policy_resource_fail" {
         Action = [
           "ec2:*",
         ]
-        Effect   = "Allow"
+        Effect   = "Deny"
         Resource = "arn:aws:ec2:*"
       },
       {