Table of Contents

1. Challenge

   Create and Attach Policy for FGACUser IAM Role

   1. Navigate to the IAM web console.
   2. Select Policies.
   3. Click Create policy.
   4. Create a policy that only allows access to the attributes specified in the lab information.
   5. Attach the create policy to the FGACUser IAM role.
2. Challenge

   Create and Attach Policy for FGACAdmin IAM Role

   1. Navigate to IAM web console.
   2. Select Policies.
   3. Click Create policy.
   4. Create a policy that provides general read access to the pinehead_records_s2 DynamoDB table.
   5. Attach the created policy to the FGACAdmin IAM role.
3. Challenge

   Test Your Policies from the Provided EC2 Instance

   1. Log in to the provided EC2 instance.

   2. Run the following commands — the first should result in an AccessDeniedException. The last two should return 10 items each.

      aws dynamodb scan --table-name pinehead_records_s2 --profile fgacuser
      

      aws dynamodb scan --table-name pinehead_records_s2 --profile fgacuser --projection-expression "artist_name,id,album_art,title"
      

      aws dynamodb scan --table-name pinehead_records_s2 --profile fgacadmin