Why data protection is essential in DynamoDB - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

Why is data protection critical in databases?

Imagine you have a diary where you write your secrets. Why should you protect it?

Choose the best reason why protecting data in a database is important.

A To make the database run faster

B To prevent unauthorized people from reading or changing the data

C To allow everyone to access the data easily

D To reduce the size of the database

💡 Hint

Think about privacy and safety of your personal information.

Data protection keeps information safe from people who should not see or change it.

❓ query_result

intermediate

What happens if data is not protected in DynamoDB?

Consider a DynamoDB table storing user passwords without encryption or access control.

What is the most likely outcome if data protection is missing?

A Passwords can be stolen by attackers

B The database will automatically delete passwords

C Passwords will be hidden from all users

D The database will run slower

💡 Hint

Think about what happens if anyone can read sensitive data.

Without protection, attackers can access and steal sensitive data like passwords.

📝 Syntax

advanced

Which DynamoDB policy snippet correctly restricts read access?

Look at these AWS IAM policy snippets for DynamoDB. Which one correctly allows only read access to a specific table?

A { "Effect": "Allow", "Action": ["dynamodb:GetItem", "dynamodb:Query"], "Resource": "arn:aws:dynamodb:region:account-id:table/MyTable" }

B { "Effect": "Allow", "Action": ["dynamodb:PutItem"], "Resource": "arn:aws:dynamodb:region:account-id:table/MyTable" }

C { "Effect": "Deny", "Action": ["dynamodb:GetItem"], "Resource": "arn:aws:dynamodb:region:account-id:table/MyTable" }

D { "Effect": "Allow", "Action": ["dynamodb:DeleteItem"], "Resource": "arn:aws:dynamodb:region:account-id:table/MyTable" }

💡 Hint

Read actions include GetItem and Query.

Only option A allows read actions (GetItem, Query) on the table, restricting other actions.

❓ optimization

advanced

How does encryption improve data protection in DynamoDB?

Which statement best explains how encryption helps protect data stored in DynamoDB?

A Encryption automatically backs up the data

B Encryption speeds up data retrieval from the database

C Encryption makes data unreadable to unauthorized users even if they access the storage

D Encryption allows anyone to read data without a password

💡 Hint

Think about what encryption does to data when someone tries to read it without permission.

Encryption scrambles data so only authorized users with keys can read it, protecting it from unauthorized access.

🔧 Debug

expert

Identify the security flaw in this DynamoDB access example

Given this DynamoDB access code snippet, what is the main security risk?

const AWS = require('aws-sdk');
const dynamodb = new AWS.DynamoDB.DocumentClient();

async function getUserData(userId) {
  const params = {
    TableName: 'Users',
    Key: { id: userId }
  };
  return await dynamodb.get(params).promise();
}

// Called with userId from client input without validation

A The function does not encrypt the data before returning

B The code uses DocumentClient which is insecure

C The TableName is hardcoded which causes errors

D User input is used directly without validation, risking unauthorized data access

💡 Hint

Think about what happens if a user sends an ID that is not theirs.

Using user input directly without checking can let users access data they should not see.