
Explanation:
The Resource ARN scopes access to a specific table (Orders) in a specific region (us-west-2) and account. GetItem, PutItem, and Query cover read and write operations.
Ultimate access to all questions.
No comments yet.
Which of the following best describes the permissions granted by this policy?
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": [
"dynamodb:GetItem",
"dynamodb:PutItem",
"dynamodb:Query"
],
"Resource": "arn:aws:dynamodb:us-west-2:123456789012:table/Orders"
}]
}
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": [
"dynamodb:GetItem",
"dynamodb:PutItem",
"dynamodb:Query"
],
"Resource": "arn:aws:dynamodb:us-west-2:123456789012:table/Orders"
}]
}
A
Full DynamoDB access to all tables in us-west-2
B
Read and write access to the Orders table in us-west-2 only
C
Read-only access to all DynamoDB tables
D
Access to Orders table in every region