Why does DynamoDB fine-grained access control require IAM condition keys like dynamodb:LeadingKeys instead of just table-level permissions?

hard🧠 Conceptual Q10 of 15

DynamoDB - Security and Access Control

ABecause table-level permissions are deprecated in DynamoDB

BBecause IAM cannot control access without condition keys

CBecause it allows restricting access to specific items or attributes, improving security

DBecause fine-grained access control is only for backup operations

Step-by-Step Solution

Solution:

Step 1: Understand the limitation of table-level permissions
Table-level permissions allow or deny access to the entire table, which is too broad for many applications.
Step 2: Explain the benefit of condition keys
Condition keys like dynamodb:LeadingKeys enable restricting access to specific items or attributes, enhancing security and data privacy.
Final Answer:
Because it allows restricting access to specific items or attributes, improving security -> Option C
Quick Check:
Fine-grained access improves security by item-level control [OK]

Quick Trick: Fine-grained access improves security beyond table-level [OK]

Common Mistakes:

MISTAKES

Master "Security and Access Control" in DynamoDB

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More DynamoDB Quizzes