title: AWS SNS topic access policy does not prevent from users to subscribe
body: <p>I have the access policy set up like the below for an SNS topic. I thought I have allowed only the <code>user2</code> to subscribe to the topic but <code>user1</code> can subscribe the topic. How can I configure this for what I want to do?</p>
  <pre><code>{
    &quot;Version&quot;: &quot;2008-10-17&quot;,
    &quot;Id&quot;: &quot;__default_policy_ID&quot;,
    &quot;Statement&quot;: [
      {
        &quot;Sid&quot;: &quot;__console_pub_0&quot;,
        &quot;Effect&quot;: &quot;Allow&quot;,
        &quot;Principal&quot;: {
          &quot;AWS&quot;: &quot;arn:aws:iam::${account_id}:user/user1&quot;
        },
        &quot;Action&quot;: &quot;SNS:Publish&quot;,
        &quot;Resource&quot;: &quot;arn:aws:sns:eu-west-2:${account_id}:topic1&quot;
      },
      {
        &quot;Sid&quot;: &quot;__console_sub_0&quot;,
        &quot;Effect&quot;: &quot;Allow&quot;,
        &quot;Principal&quot;: {
          &quot;AWS&quot;: &quot;arn:aws:iam::${account_id}:user/user2&quot;
        },
        &quot;Action&quot;: [
          &quot;SNS:Subscribe&quot;,
          &quot;SNS:Receive&quot;
        ],
        &quot;Resource&quot;: &quot;arn:aws:sns:eu-west-2:${account_id}:topic1&quot;
      }
    ]
  }
  </code></pre>