SCS-C01 Web TestEngine Demo

Q49 Single choice

A company needs to restrict access to Amazon DynamoDB tables in the us-east1 Region for account

0123456789. All users must be denied permission to work with DynamoDB tables in us-east-1 unless the users access the tables through the following endpoint: vpce-11aa22bb.

Which IAM statement will enforce this requirement?

A
"Statement": [
{
"Sid": "AccessFromSpecificEndpoint",
"Action": "dynamodb:*",
"Effect": "Deny",
"Resource": "arn:aws:dynamodb:us-east-1:0123456789:table/*",
"Condition": { "StringEquals" : { "aws:sourceVpce": "vpce-
1laa22bb" } }
}
]
B
"Statement": [
{
"Sid": "AccessFromSpecificEndpoint",
"Action": "dynamodb:*",
"Effect": "Allow",
"Resource": "arn:aws:dynamodb:us-east-1:0123456789:table/*",
"Condition": { "StringNotEquals" : { "aws:sourceVpce": "vpce-
1laa22bb" } }
}
]
C
"Statement": [
{
"Sid": "AccessFromSpecificEndpoint",
"Action": "dynamodb:*",
"Effect": "Allow",
"Resource": "arn:aws:dynamodb:us-east-1:0123456789:table/*",
"Condition": { "StringEquals" : { "aws:sourceVpce": "vpce-
1laa22bb" } }
}
]
D
"Statement": [
{
"Sid": "AccessFromSpecificEndpoint",
"Action": "dynamodb:*",
"Effect": "Deny",
"Resource": "arn:aws:dynamodb:us-east-1:0123456789:table/*",
"Condition": { "StringNotEquals" : { "aws:sourceVpce": "vpce-
1laa22bb" } }
}
]

SCS-C01 Web TestEngine demo