Exam AWS Certified Cloud Practitioner CLF-C02 topic 1 question 5 discussion

based on docs, AWS DynamoDB is automatically encrypted your data as default (but RDS you must turn on this feature by your self) ref: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html ref: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html#Overview.Encryption.Determining

Under the AWS Shared Responsibility Model, the customer's responsibilities when using Amazon DynamoDB include: C. Access to DynamoDB tables The customer is responsible for managing and controlling access to their DynamoDB tables. This includes defining appropriate permissions, user access control, and authentication mechanisms to ensure that only authorized users or services can access the tables. The other options are not customer responsibilities: D. Encryption of data at rest in DynamoDB: AWS provides encryption of data at rest as a built-in feature for DynamoDB. The customer can enable encryption for their tables, but AWS handles the actual implementation and management of the encryption process. Therefore, the correct customer responsibility is C. Access to DynamoDB tables.

The customer responsibility include access to DynamoDB

C. Access to DynamoDB tables

C. Access to DynamoDB tables

Customers are responsible for controlling the encryption of their data.

C. Access to DynamoDB tables

based on docs, AWS DynamoDB is automatically encrypted your data as default (but RDS you must turn on this feature by your self) ref: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html

Under the AWS Shared Responsibility Model, the responsibility for certain aspects of a service is divided between AWS and the customer. Regarding Amazon DynamoDB: The customer is responsible for: C. Access to DynamoDB tables This means that the customer is responsible for managing and controlling access to their DynamoDB tables, including setting up appropriate IAM (Identity and Access Management) permissions and policies. AWS is responsible for: A. Physical security of DynamoDB B. Patching of DynamoDB D. Encryption of data at rest in DynamoDB AWS takes care of the physical infrastructure, patches and updates the DynamoDB service, and provides encryption mechanisms for data at rest. It's important for customers to be aware of their responsibilities and configure access controls accordingly to ensure the security of their DynamoDB tables.

C is correct.

If Encryption is default in dynamodb . Then answer will be C. Access to dynamoDb table Right..

Encryption is AWS's responsibility.

C. Access to DynamoDB tables This means that customers are responsible for managing access control to their DynamoDB tables, including configuring IAM policies, roles, and permissions to ensure that only authorized users or services can interact with the tables. This responsibility involves setting up appropriate authentication and authorization mechanisms to protect the data stored in DynamoDB from unauthorized access.

C. Access to DynamoDB tables The customer is responsible for managing access control to their DynamoDB tables, including defining permissions, roles, and policies to control who can access the tables and what actions they can perform. This involves setting up appropriate IAM policies and roles to restrict access to authorized users and applications while adhering to security best practices.

Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the appropriate permissions.

The customer is responsible for: C. Access to DynamoDB tables

C = CORRECT