A developer is implementing an AWS Lambda function that will read data from an Amazon DynamoDB table.What is the most secure method of providing the Lambda function access permissions to the DynamoDB table?

Answer options:

A.Create an IAM role.Create IAM policy granting necessary access permissions from AWS Lambda. Assign the IAM policy to the IAM role.Assign the IAM role to the DynamoDB table.
B.Create an IAM user and access key. Create IAM policy granting necessary access permissions to the DynamoDB table.Assign the IAM policy to the IAM user.Provide the access key ID and the secret access key to the developer.
C.Create a DynamoDB username and password.Provide the username and password to the developer.
D.Create an IAM role.Create IAM policy granting necessary access permissions to the DynamoDB table.Assign the IAM policy to the IAM role.Assign the IAM role to the Lambda Execution Role.
E.Create IAM policy granting necessary access permissions to the DynamoDB table.Assign the IAM policy to the Lambda Function policy.

Answer: D
Option A is incorrect because you do not assign IAM roles to DynamoDB tables.
Option B is incorrect because this is not the optimal solution.It requires sharing of user access keys, which is not the best security practice.Changing secret access keys or user IDs would require additional operational overhead or code changes.
Option C is incorrect because there are no DynamoDB usernames and passwords.
Option D is CORRECT because the best security practice for access control to DynamoDB tables is to use IAM policies and IAM roles.The role then needs to be assigned to the Lambda Execution Role.An AWS Lambda function`s execution role grants the function permission to access other AWS services and resources.
Option E is incorrect because the Lambda function policy defines which AWS resources are allowed to invoke the Lambda function.
Reference:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/best-practices-security-preventative.html
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-overview.html