Ravi Sir's Cards › AWS
Least-privilege actions
This interview card covers Least-privilege actions. Dynamodb — * on * breaks blast-radius interviews. List exact actions — GetItem Query PutItem; scope ARN + conditions. MNC — refuse Scan in prod role; allow Query only.
Read card text
What this card says
What it is
dynamodb:* on * breaks blast-radius interviews.
Why it matters
List exact actions: GetItem Query PutItem; scope ARN + conditions.
Action list
How / example
MNC: refuse Scan in prod role; allow Query only.
MNC: no Scan.