[Solved] Given this IAM policy snippet, which items can the user access?{ "Effect": "Allow", "Action": "dynamodb:GetItem", "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders", "Condition":... | DynamoDB

DynamoDB - Security and Access Control

Given this IAM policy snippet, which items can the user access?

{
  "Effect": "Allow",
  "Action": "dynamodb:GetItem",
  "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders",
  "Condition": {
    "ForAllValues:StringEquals": {
      "dynamodb:LeadingKeys": ["user123"]
    }
  }
}

AAll items in the Orders table

BOnly items with partition key 'user123'

CItems with any partition key except 'user123'

DNo items, because the policy is invalid

Step-by-Step Solution

Solution:

Step 1: Analyze the IAM policy condition
The condition restricts access to items where the partition key matches 'user123'.
Step 2: Determine accessible items
Only items with partition key 'user123' are accessible; others are denied.
Final Answer:
Only items with partition key 'user123' -> Option B
Quick Check:
Condition limits to 'user123' keys [OK]

Quick Trick: Check the LeadingKeys value to find accessible items [OK]

Common Mistakes:

MISTAKES

Assuming access to all items
Thinking policy denies all access
Ignoring the condition block

Master "Security and Access Control" in DynamoDB

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More DynamoDB Quizzes

Given this IAM policy snippet, which items can the user access?

Step 1: Analyze the IAM policy condition

Step 2: Determine accessible items

Final Answer:

Quick Check:

Want More Practice?