title: I have a question about the priority of allowed and denied IP addresses in cognito advanced security
body: <p>I have a question about the priority of allowed and denied IP addresses in cognito advanced security.</p>
  <p>Which takes precedence, the list of allowed IP addresses or the list of blocked IP addresses?</p>
  <p>Example
  Allowed: 111.111.111.111/32
  Denied: 0.0.0.0/1, 128.0.0.0/1</p>
  <p>When I check the movement, I see that allowed IP addresses are also denied. Is this a specification?</p>