Explanation:
The Resource ARN scopes access to a specific table (Orders) in a specific region (us-west-2) and account. GetItem, PutItem, and Query cover read and write operations.
Ultimate access to all questions.
Which of the following best describes the permissions granted by this policy?
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": [
"dynamodb:GetItem",
"dynamodb:PutItem",
"dynamodb:Query"
],
"Resource": "arn:aws:dynamodb:us-west-2:123456789012:table/Orders"
}]
}
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": [
"dynamodb:GetItem",
"dynamodb:PutItem",
"dynamodb:Query"
],
"Resource": "arn:aws:dynamodb:us-west-2:123456789012:table/Orders"
}]
}
A
Full DynamoDB access to all tables in us-west-2
B
Read and write access to the Orders table in us-west-2 only
C
Read-only access to all DynamoDB tables
D
Access to Orders table in every region
No comments yet.