[Solved] Given this IAM policy condition:{"Condition": {"ForAllValues:StringEquals": {"dynamodb:LeadingKeys": ["user123"]}}What items can the user access in the DynamoDB table? | DynamoDB

DynamoDB - Security and Access Control

Given this IAM policy condition:

{"Condition": {"ForAllValues:StringEquals": {"dynamodb:LeadingKeys": ["user123"]}}

What items can the user access in the DynamoDB table?

AAll items in the table

BOnly items where the partition key equals 'user123'

COnly items where the sort key equals 'user123'

DNo items, because the condition is invalid

Step-by-Step Solution

Solution:

Step 1: Understand the dynamodb:LeadingKeys condition
This condition restricts access to items with partition key values matching 'user123'.
Step 2: Clarify partition vs sort key
The condition applies to the partition key, not the sort key, so only items with partition key 'user123' are accessible.
Final Answer:
Only items where the partition key equals 'user123' -> Option B
Quick Check:
dynamodb:LeadingKeys limits partition key access [OK]

Quick Trick: LeadingKeys controls partition key item access [OK]

Common Mistakes:

MISTAKES

Master "Security and Access Control" in DynamoDB

9 interactive learning modes - each teaches the same concept differently

More DynamoDB Quizzes

Given this IAM policy condition: