Ravi Sir's Cards › AWS
LeadingKeys demo
This interview card covers LeadingKeys demo. Policy without condition still reads other tenants. ForAllValues — StringLike dynamodb:LeadingKeys TENANT#acme. Role acme , then Get beta , then AccessDenied , then CloudTrail proof.
Read card text
What this card says
What it is
Policy without condition still reads other tenants.
Why it matters
ForAllValues:StringLike dynamodb:LeadingKeys TENANT#acme.
dynamodb:LeadingKeys
How / example
Role acme → Get beta → AccessDenied → CloudTrail proof.
Security interview.