Fine-grained access control in DynamoDB - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is fine-grained access control in DynamoDB?

Fine-grained access control lets you set detailed permissions on who can access specific items or attributes in a DynamoDB table, not just the whole table.

intermediate

How does DynamoDB implement fine-grained access control?

It uses IAM policies with condition keys that check item attributes, so you can allow or deny access based on data values in the table.

intermediate

Which IAM condition key is commonly used for fine-grained access control in DynamoDB?

The condition key 'dynamodb:LeadingKeys' is used to restrict access to items with specific partition key values.

beginner

Why is fine-grained access control useful in real life?

It helps protect sensitive data by letting users see or change only the data they are allowed to, like employees accessing only their own records.

advanced

Can fine-grained access control restrict access to specific attributes in DynamoDB items?

Yes, you can use IAM policies with the 'dynamodb:Attributes' condition to allow or deny access to certain attributes within items.

What does fine-grained access control in DynamoDB allow you to do?

A Control access only to the entire table

B Control access to specific items or attributes

C Control access to AWS services outside DynamoDB

D Control network traffic to DynamoDB

Fine-grained access control lets you set permissions on specific items or attributes, not just the whole table.

Which IAM condition key restricts access based on partition key values?

A dynamodb:Select

B dynamodb:Attributes

C dynamodb:LeadingKeys

D dynamodb:ReturnConsumedCapacity

The 'dynamodb:LeadingKeys' condition key is used to restrict access to items with specific partition key values.

What is a common use case for fine-grained access control?

A Allowing users to access only their own data

B Backing up the entire database

C Increasing read capacity units

D Encrypting data at rest

Fine-grained access control is often used to let users access only their own records or data.

Can fine-grained access control be used to restrict access to specific attributes in an item?

A No, it only works at the item level

B No, it only controls table-level access

C Yes, but only for indexes

D Yes, using 'dynamodb:Attributes' condition key

You can restrict access to specific attributes using the 'dynamodb:Attributes' condition key in IAM policies.

Which AWS service is used to define fine-grained access control policies for DynamoDB?

A AWS IAM

B AWS Lambda

C Amazon S3

D Amazon EC2

AWS IAM is used to create policies that define fine-grained access control for DynamoDB.

Explain how fine-grained access control works in DynamoDB and why it is important.

Think about how you can let users see only their own data.

Describe a real-life scenario where fine-grained access control in DynamoDB would be useful.

Imagine a company where employees should only see their personal information.