Exam AWS-SysOps topic 1 question 276 discussion

This approach suggests that you create a DynamoDB table for each IAM user, using the user's name as part of the table name, and then define a policy allowing access to only their specific table. While this could technically work, it's not a recommended practice due to the potential complexities and limitations it introduces. In most cases, it's better to manage access control using IAM policies and proper roles rather than trying to map resources like DynamoDB tables to user names. IAM policies provide more flexible and manageable access control mechanisms, especially as your organization and resource usage grow.

The implementation of (B) may work, but is very strange. Who would do this?

I vote B

B "Resource": "arn:aws:dynamodb:*:*:table/${aws:username}"

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_dynamodb_specific-table.html

B. Create a DynamoDB table with the same name as the IAM user name and define the policy rule which grants access based on the DynamoDB ARN using a variable

Incorrect Policy Sample screenshot attached from the previous question answer.