IAM policy for DynamoDB - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the DynamoDB action for reading data.

DynamoDB

{
  "Effect": "Allow",
  "Action": "dynamodb:[1]",
  "Resource": "*"
}

Drag options to blanks, or click blank then click option'

APutItem

BUpdateItem

CDeleteItem

DGetItem

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing actions that modify data instead of reading it.

Confusing 'PutItem' with reading actions.

The GetItem action allows reading data from DynamoDB.

2fill in blank

medium

Complete the code to specify the resource ARN for a DynamoDB table named 'Users'.

DynamoDB

"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/[1]"

Drag options to blanks, or click blank then click option'

AProducts

BOrders

CUsers

DInventory

Attempts:

3 left

💡 Hint

Common Mistakes

Using a different table name than specified.

Leaving the table name blank.

The ARN must include the exact table name, which is Users in this case.

3fill in blank

hard

Fix the error in the IAM policy action to allow scanning a DynamoDB table.

DynamoDB

"Action": "dynamodb:[1]"

Drag options to blanks, or click blank then click option'

AScanTable

BScan

CQuery

DListTables

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'ScanTable' which is not a valid action.

Confusing 'Query' with 'Scan'.

The correct action to scan a DynamoDB table is Scan. 'ScanTable' is invalid.

4fill in blank

hard

Fill both blanks to allow updating and deleting items in a DynamoDB table.

DynamoDB

{
  "Effect": "Allow",
  "Action": ["dynamodb:[1]", "dynamodb:[2]"],
  "Resource": "*"
}

Drag options to blanks, or click blank then click option'

AUpdateItem

BPutItem

CDeleteItem

DGetItem

Attempts:

3 left

💡 Hint

Common Mistakes

Using PutItem instead of UpdateItem for updates.

Confusing GetItem with delete actions.

To update and delete items, use UpdateItem and DeleteItem actions.

5fill in blank

hard

Fill all three blanks to create a policy allowing listing tables, reading an item, and writing an item.

DynamoDB

{
  "Effect": "Allow",
  "Action": ["dynamodb:[1]", "dynamodb:[2]", "dynamodb:[3]"],
  "Resource": "*"
}

Drag options to blanks, or click blank then click option'

AListTables

BGetItem

CPutItem

DDeleteItem

Attempts:

3 left

💡 Hint

Common Mistakes

Including DeleteItem when not needed.

Mixing up GetItem and PutItem.

This policy allows listing tables (ListTables), reading items (GetItem), and writing items (PutItem).