1 回答
- 最新
- 投票最多
- 评论最多
1
Hi,
I'd recommend to use a least-priviledge approach. Instead of denying access for certain principals (humans in this case), you should only grant permissions to those principals you know for sure need access (not humans). AWS denies access by default, so if you don't explictly allow an acces, AWS will block it. If you only grant access to the principals you want, AWS will block the rest, including humans.
- How Amazon DynamoDB works with IAM
- Determining whether a request is allowed or denied within an account
I hope this helps.
已回答 3 个月前
相关内容
- AWS 官方已更新 2 年前