nerdexam
Amazon

DBS-C01 · Question #270

A company uses Amazon DynamoDB to store its customer data. The DynamoDB table is designed with the user ID as the partition key value and multiple other non-key attributes. An external application…

The correct answer is D. Use the dynamodb:LeadingKeys condition key in the external application's IAM policy to grant. https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/specifying-conditions.html dynamodb:LeadingKeys condition key to limit user actions only on the items whose UserID partition key value matches the Login.

Submitted by takeshi77· Mar 6, 2026Database Security

Question

A company uses Amazon DynamoDB to store its customer data. The DynamoDB table is designed with the user ID as the partition key value and multiple other non-key attributes. An external application needs to access data for specific user IDs. The external application must have access only to items with specific partition key values. What should the database specialist do to meet these requirements?

Options

  • AUse the dynamodb:ReturnValues condition key in the external application's IAM policy to grant
  • BUse a projection expression to select specific users from the DynamoDB table for the external
  • CUse the ExecuteStatementAPI operation to select specific users from the DynamoDB table for the
  • DUse the dynamodb:LeadingKeys condition key in the external application's IAM policy to grant

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    13% (6)
  • C
    4% (2)
  • D
    77% (36)

Explanation

https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/specifying-conditions.html dynamodb:LeadingKeys condition key to limit user actions only on the items whose UserID partition key value matches the Login.

Topics

#DynamoDB#IAM policies#item-level access#partition key

Community Discussion

No community discussion yet for this question.

Full DBS-C01 Practice