Q87 — AWS DVA-C02 Ch.3

Question 87 of 100 | ← Chapter 3

A game stores user game data in an Amazon DynamoDB table. Individual users must not access other users' game data. How can this be achieved?

• A. Encrypt game data using individual user keys.
• B. Restrict access to specific items based on certain primary key values. ✓
• C. Stage data in an SQS queue to inject metadata before accessing DynamoDB.
• D. Read records from DynamoDB and discard irrelevant data on the client side.

Correct Answer: B. Restrict access to specific items based on certain primary key values.

Explanation

In Amazon DynamoDB, restricting access to specific items based on primary key values is an effective method to prevent individual users from accessing other users' game data. By configuring fine-grained access control using primary key conditions (e.g., via IAM policies with key-based conditions), you can precisely govern which data a given user can access—ensuring isolation. Option A (encryption) does not inherently enforce access control—it protects confidentiality but not authorization. Option C (SQS staging) adds unnecessary complexity and does not address granular item-level access restrictions. Option D (client-side filtering) fails to prevent unauthorized data exposure—the full record is still retrieved and accessible before filtering. Therefore, Option B is the correct answer.