AWS Certified Developer Associate DVA-C02 Practice Question
Your company is deploying a new microservice on AWS that will access an Amazon DynamoDB table to only read records. As an AWS developer, you are tasked with ensuring that the microservice's access adheres to the principle of least privilege. Which of the following would be the most appropriate action to take?
Remove any DynamoDB permissions from the microservice as it can assume the required permissions dynamically at runtime
Create an IAM policy with permissions for dynamodb:GetItem, dynamodb:BatchGetItem, dynamodb:Query, and dynamodb:Scan and attach it to the microservice's IAM role
Grant the microservice full access to the Amazon DynamoDB table
Create an IAM policy that includes dynamodb:PutItem and dynamodb:UpdateItem and attach it to the microservice's IAM role
Creating an IAM policy with permissions to allow only dynamodb:GetItem, dynamodb:BatchGetItem, dynamodb:Query, and dynamodb:Scan and attaching it to the IAM role assumed by the microservice would strictly limit the microservice to read operations, adhering to the principle of least privilege. Granting full access to DynamoDB would grant more permissions than necessary for the microservice, contrary to the principle of least privilege, while dynamodb:PutItem and dynamodb:UpdateItem are write operations and should not be included if the microservice is intended to only read records.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the principle of least privilege in AWS?
Open an interactive chat with Bash
What do the `dynamodb:GetItem`, `dynamodb:BatchGetItem`, `dynamodb:Query`, and `dynamodb:Scan` actions do?
Open an interactive chat with Bash
How do IAM roles interact with microservices in AWS?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .