nerdexam
Amazon

DBS-C01 · Question #265

A startup company in the travel industry wants to create an application that includes a personal travel assistant to display information for nearby airports based on user location. The application…

The correct answer is B. Use IAM policies with a combination of IAM conditions and actions to implement fine-grained. https://aws.amazon.com/blogs/aws/fine-grained-access-control-for-amazon-dynamodb/

Submitted by parkjh· Mar 6, 2026Database Security

Question

A startup company in the travel industry wants to create an application that includes a personal travel assistant to display information for nearby airports based on user location. The application will use Amazon DynamoDB and must be able to access and display attributes such as airline names, arrival times, and flight numbers. However, the application must not be able to access or display pilot names or passenger counts. Which solution will meet these requirements MOST cost-effectively?

Options

  • AUse a proxy tier between the application and DynamoDB to regulate access to specific tables,
  • BUse IAM policies with a combination of IAM conditions and actions to implement fine-grained
  • CUse DynamoDB resource policies to regulate access to specific tables, items, and attributes.
  • DConfigure an AWS Lambda function to extract only allowed attributes from tables based on user

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    79% (22)
  • C
    4% (1)
  • D
    11% (3)

Explanation

https://aws.amazon.com/blogs/aws/fine-grained-access-control-for-amazon-dynamodb/

Topics

#DynamoDB#IAM policies#fine-grained access control#attribute-level access

Community Discussion

No community discussion yet for this question.

Full DBS-C01 Practice