AWS Certified Developer Associate DVA-C02 Practice Question
Your company is deploying a new microservice on AWS that will access an Amazon DynamoDB table to only read records. As an AWS developer, you are tasked with ensuring that the microservice's access adheres to the principle of least privilege. Which of the following would be the most appropriate action to take?
Grant the microservice full access to the Amazon DynamoDB table
Create an IAM policy that includes dynamodb:PutItem and dynamodb:UpdateItem and attach it to the microservice's IAM role
Remove any DynamoDB permissions from the microservice as it can assume the required permissions dynamically at runtime
Create an IAM policy with permissions for dynamodb:GetItem, dynamodb:BatchGetItem, dynamodb:Query, and dynamodb:Scan and attach it to the microservice's IAM role
Creating an IAM policy with permissions to allow only dynamodb:GetItem, dynamodb:BatchGetItem, dynamodb:Query, and dynamodb:Scan and attaching it to the IAM role assumed by the microservice would strictly limit the microservice to read operations, adhering to the principle of least privilege. Granting full access to DynamoDB would grant more permissions than necessary for the microservice, contrary to the principle of least privilege, while dynamodb:PutItem and dynamodb:UpdateItem are write operations and should not be included if the microservice is intended to only read records.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the principle of least privilege and why is it important in AWS?
Open an interactive chat with Bash
What are the specific permissions associated with DynamoDB and their functions?
Open an interactive chat with Bash
What are IAM roles and policies, and how do they work in AWS?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access