Prevent human access to DynamoDB data?

0

I am trying to prevent human access to DynamoDB table. I'm currently thinking of two approaches

  1. Deny based on aws:PrincipalType - account and user
  2. Allow KMS access only to AWS services

Is there a better approach to solve this problem?

1 Risposta
1

Hi,

I'd recommend to use a least-priviledge approach. Instead of denying access for certain principals (humans in this case), you should only grant permissions to those principals you know for sure need access (not humans). AWS denies access by default, so if you don't explictly allow an acces, AWS will block it. If you only grant access to the principals you want, AWS will block the rest, including humans.

I hope this helps.

AWS
SergioA
con risposta 3 mesi fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande