GUI-803

added IAM deny statement to default user policy