DynamoDB - Security and Access Control
Your application accesses DynamoDB over the internet despite having a VPC endpoint configured. What should you verify first?
Your application accesses DynamoDB over the internet despite having a VPC endpoint configured. What should you verify first?
medium📝 Debug Q7 of 15
Step-by-Step Solution
Solution:
Step 1: Understand routing for VPC endpoints
For traffic to use the VPC endpoint, the route tables for the subnets must have routes directing DynamoDB traffic to the endpoint.Step 2: Exclude unrelated factors
Security groups on Gateway endpoints do not control traffic; public IP or table permissions do not affect routing.Final Answer:
That the VPC endpoint is associated with the correct route tables for your subnets -> Option BQuick Check:
Route tables must direct traffic to endpoint [OK]
Quick Trick: Check route tables for VPC endpoint association [OK]
Common Mistakes:
MISTAKES- Assuming security groups control Gateway endpoint traffic
- Focusing on public IP instead of routing
- Checking DynamoDB table permissions for routing issues
Master "Security and Access Control" in DynamoDB
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore DynamoDB Quizzes