nerdexam
AmazonAmazon

DBS-C01 · Question #142

DBS-C01 Question #142: Real Exam Question with Answer & Explanation

Sign in or unlock DBS-C01 to reveal the answer and full explanation for question #142. The question stem and answer options stay visible for context.

Submitted by kev92· Mar 6, 2026Security and Compliance - Implementing fine-grained access control on DynamoDB using IAM condition keys (dynamodb:Attributes and dynamodb:Select) to restrict access to specific table attributes for least-privilege and regulatory compliance purposes.

Question

A company uses the Amazon DynamoDB table contractDB in us-east-1 for its contract system with the following schema: orderID (primary key) timestamp (sort key) contract (map) createdBy (string) customerEmail (string) After a problem in production, the operations team has asked a database specialist to provide an IAM policy to read items from the database to debug the application. In addition, the developer is not allowed to access the value of the customerEmail field to stay compliant. Which IAM policy should the database specialist use to achieve these requirements? A. B. C. D.

Options

  • A{ "Version": "2012-10-17", "Statement": [ { "Sid": "IAMPolicy", "Effect": "Allow", "Action": [ "dynamodb:Query" ], "Resource": [ "arn:aws:dynamodb:us-east-1:123456789012:table/contractDB" ], "Condition": { "ForAllValues:StringLike": { "dynamodb:Attributes": [ "orderID", "timestamp", "contract", "createdBy" ] }, "StringEquals": { "dynamodb:Select": "SPECIFIC_ATTRIBUTES" } } } ] }
  • B{ "Version": "2012-10-17", "Statement": [ { "Sid": "IAMPolicy", "Effect": "Allow", "Action": [ "dynamodb:Query" ], "Resource": [ "arn:aws:dynamodb:us-east-1:123456789012:table/contractDB" ], "Condition": { "ForAllValues:StringLike": { "dynamodb:Attributes": [ "customerEmail" ] }, "StringEquals": { "dynamodb:Select": "SPECIFIC_ATTRIBUTES" } } } ] }

Unlock DBS-C01 to see the answer

You've previewed enough free DBS-C01 questions. Unlock DBS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#IAM Fine-Grained Access Control#DynamoDB Attribute-Level Security#IAM Condition Keys#Data Compliance
Full DBS-C01 PracticeBrowse All DBS-C01 Questions