Why Do DEW Permissions Fail to Take Effect Immediately?

Generally, if you have configured DEW-related permissions, such as KMS Administrator and KMS CMKFullAccess, the permissions take effect immediately.

However, permissions cannot take effect in time in the following scenarios:

1. You did not log out of the console in time and the session is cached. Log in to the console again.
2. You used services that have permissions to cache data, such as OBS. In this case, when the permission takes effect depends on the service cache duration.
3. APIG is called. In this case, when the permission takes effect depends on the time when IAM broadcasts the permission change to the gateway.