Why Do DEW Pemissions Fail to Take Effect Immediately?

Generally, DEW permissions such KMS Administrator and KMS CMKFullAccess take effect immediately.

However, permissions cannot take effect in time in the following scenarios:

1. You did not log out of the console in time and the session is cached. Log in to the console again.
2. You used services that have permissions to cache data, such OBS. In this case, when the permission takes effect depends on the service cache duration.
3. APIG is called. In this case, when the permission take effect depends on the time when IAM broadcasts the permission change to the gateway.