[Solved] An IAM policy has this statement:{"Effect": "Allow", "Action": "dynamodb:PutItem", "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/MyTable"}The user still cannot put items.... | AWS

AWS - Identity and Access Management

An IAM policy has this statement:

{"Effect": "Allow", "Action": "dynamodb:PutItem", "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/MyTable"}

The user still cannot put items. What could be the problem?

AThe Effect should be Deny to block other actions

BThe policy is missing permissions for the table's indexes

CThe Resource ARN is missing the region

DThe Action name is incorrect

Step-by-Step Solution

Solution:

Step 1: Understand DynamoDB resource permissions
PutItem may require permissions on table and its indexes.
Step 2: Check policy resource coverage
Policy only allows table ARN, missing index ARNs which may block PutItem.
Final Answer:
Missing permissions for indexes can block PutItem -> Option B
Quick Check:
Indexes need explicit permissions [OK]

Quick Trick: Include indexes in DynamoDB permissions for full access [OK]

Common Mistakes:

MISTAKES

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

An IAM policy has this statement: