159k views
0 votes
a python application running on vmware cloud on aws must connect to an amazon dynamodb table called tutorialsdojo. considering the principle of least privilege access, a solutions architect must form an iam policy that allows the application to read, write, update and delete items from the tutorialsdojo table only. which iam policy would satisfy the requirements?

User MarkSouls
by
7.9k points

1 Answer

5 votes

Final answer:

  1. To allow a Python application running on VMware Cloud on AWS to connect to an Amazon DynamoDB table called tutorialsdojo, a Solutions Architect must create an IAM policy that grants the necessary permissions. The IAM policy should include permissions to read, write, update, and delete items from the tutorialsdojo table only.
  1. Step-by-step explanation:
  1. To allow a Python application running on VMware Cloud on AWS to connect to an Amazon DynamoDB table called tutorialsdojo, a Solutions Architect would need to form an IAM policy. The IAM policy should grant the necessary permissions to read, write, update, and delete items from the tutorialsdojo table only. Here is an example of an IAM policy that satisfies these requirements:
  1. IAM Policy Example:
  1. .1dynamodb:Query - To read items from the tutorialsdojo table.
  1. 2.dynamodb:PutItem - To write new items to the tutorialsdojo table.
  1. 4.dynamodb:UpdateItem - To update existing items in the tutorialsdojo table.
  1. 5.dynamodb:DeleteItem - To delete items from the tutorialsdojo table.
  1. Attach the newly created IAM policy to the IAM role associated with the Python application running on VMware Cloud on AWS.

User Ruslan Leshchenko
by
8.1k points