[Solved] You find an IAM role with this policy:{"Effect": "Allow", "Action": ["dynamodb:*"] , "Resource": ["*"]}What is the best fix to follow least privilege? | AWS

AWS - Identity and Access Management

You find an IAM role with this policy:

{"Effect": "Allow", "Action": ["dynamodb:*"] , "Resource": ["*"]}

What is the best fix to follow least privilege?

AAdd more '*' resources

BRemove the policy entirely

CChange Effect to Deny

DLimit actions to only required DynamoDB operations and specify resource ARNs

Step-by-Step Solution

Solution:

Step 1: Identify problem
Policy allows all DynamoDB actions on all resources, too broad.
Step 2: Apply least privilege fix
Restrict actions to needed ones and specify exact resource ARNs.
Final Answer:
Limit actions to only required DynamoDB operations and specify resource ARNs -> Option D
Quick Check:
Least privilege = restrict actions and resources [OK]

Quick Trick: Specify exact actions and resources, no wildcards [OK]

Common Mistakes:

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

You find an IAM role with this policy: