AWS Certified Developer Associate DVA-C02 Practice Question

Your company is deploying a new microservice on AWS that will access an Amazon DynamoDB table to only read records. As an AWS developer, you are tasked with ensuring that the microservice's access adheres to the principle of least privilege. Which of the following would be the most appropriate action to take?

  • Create an IAM policy that includes dynamodb:PutItem and dynamodb:UpdateItem and attach it to the microservice's IAM role

  • Create an IAM policy with permissions for dynamodb:GetItem, dynamodb:BatchGetItem, dynamodb:Query, and dynamodb:Scan and attach it to the microservice's IAM role

  • Grant the microservice full access to the Amazon DynamoDB table

  • Remove any DynamoDB permissions from the microservice as it can assume the required permissions dynamically at runtime

AWS Certified Developer Associate DVA-C02
Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot