Ravi Sir's Cards › AWS
Fine-grained access
This interview card covers Fine-grained access. Table-wide Allow lets any PK be read. Condition — dynamodb:LeadingKeys equals tenant prefix. MNC — show Deny GetItem when PK ≠ caller tenant.
Read card text
What this card says
What it is
Table-wide Allow lets any PK be read.
Why it matters
Condition: dynamodb:LeadingKeys equals tenant prefix.
dynamodb:LeadingKeys
How / example
MNC: show Deny GetItem when PK ≠ caller tenant.
MNC: LeadingKeys demo.