An organization uses an IAM group DatabaseAdmin to manage administrative access to its database services. What is the best way to prevent accidental deletion of a DynamoDB table?

Answer options:

A.Enable deletion protection on the DynamoDB table.
B.Create a resource-based inline policy with explicit deny on the dynamodb:DeleteTable action. Attach the policy to the DynamoDB table.
C.Create an inline policy with explicit deny on the dynamodbDeleteTable action. Attach the policy to the users of the DatabaseAdmin group.
D.Create an IAM policy with explicit deny on dynamodb:DeleteTable action.Attach the policy to DatabaseAdmin group.

Answer: D
Option A is incorrect because DynamoDB does not have the deletion protection feature.
Option B is incorrect because role-based access control is the best practice for controlling authorized actions and permissions.
Option C is incorrect because role-based access control is the best practice for controlling authorized actions and permissions.
Option D is CORRECT because using role-based access control with an explicit deny effect on the IAM policy attached to the DatabaseAdmin group is the optimal solution to the requirement.
Reference:
https://aws.amazon.com/blogs/database/preventing-accidental-table-deletion-in-dynamodb/