Prevent DynamoDB Accidental Deletion

SAA-C03 By islever Editorial Last updated

Determine appropriate data security controls.

Short answer

C Configure deletion protection on the DynamoDB tables.

Question

A company stores critical data in Amazon DynamoDB tables in the company's AWS account. An IT administrator accidentally deleted a DynamoDB table. The deletion caused a significant loss of data and disrupted the company's operations. The company wants to prevent this type of disruption in the future. Which solution will meet this requirement with the LEAST operational overhead?
  1. Configure a trail in AWS CloudTrail. Create an Amazon EventBridge rule for delete actions. Create an AWS Lambda function to automatically restore deleted DynamoDB tables.
  2. Create a backup and restore plan for the DynamoDB tables. Recover the DynamoDB tables manually.
  3. Configure deletion protection on the DynamoDB tables. Correct Answer
  4. Enable point-in-time recovery on the DynamoDB tables.

Key Takeaways

Tests knowledge of DynamoDB data protection features; the common trap is choosing automated recovery mechanisms over simple preventative controls.

Learn how to prevent accidental deletion of critical Amazon DynamoDB tables with the least operational overhead. The correct solution is enabling Deletion Protection (C).

Common mistake: Choosing Point-in-Time Recovery (D) or manual backup plans (B) adds unnecessary complexity and operational overhead compared to a single configuration toggle.

Expert Analysis

Why the Answer Is Correct

Deletion Protection is a specific feature for Amazon DynamoDB that prevents accidental table deletion. When enabled, attempts to delete the table will fail unless the setting is explicitly disabled first. This directly addresses the scenario of an administrator accidentally deleting a table, providing the LEAST operational overhead because it requires no code, no external services, and zero ongoing management.

Why the Other Options Are Wrong

Option A involves creating CloudTrail trails, EventBridge rules, and Lambda functions, which introduces significant architectural complexity and operational overhead. Option B relies on manual recovery, which does not prevent the disruption and requires human intervention. Option D enables Point-in-Time Recovery (PITR), which allows restoration from backups but does not prevent the initial deletion action, thus failing to stop the disruption.

Community Comment Notes

The community overwhelmingly agrees with option C. As noted by user BillaRanga, "Deletion protection is now available for Amazon DynamoDB tables in all AWS Regions," highlighting its widespread availability and relevance. User Typewriter101 correctly points out that manual options involve more operations, reinforcing the 'least overhead' requirement.

Official Reference

https://aws.amazon.com/about-aws/whats-new/2023/03/amazon-dynamodb-table-deletion-protection/

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always look for the simplest native feature that solves the problem before considering complex integrations. If a question asks for 'least operational overhead,' avoid solutions requiring custom code or manual processes if a built-in toggle exists.

Frequently Asked Questions

Why is Point-in-Time Recovery (D) incorrect?

PITR allows you to restore data after deletion but does not prevent the deletion event itself, so it fails to stop the operational disruption.

Does Deletion Protection affect performance?

No, Deletion Protection is a metadata setting that only impacts the DeleteTable API call and has no effect on table performance or latency.

More SAA-C03 FAQ →

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. BillaRanga 👍 15 Answered C
    https://aws.amazon.com/about-aws/whats-new/2023/03/amazon-dynamodb-table-deletion-protection/ Deletion protection is now available for Amazon DynamoDB tables in all AWS Regions. DynamoDB now makes it possible for you to protect your tables from accidental deletion when performing regular table management operations. When creating new tables or managing existing tables, authorized administrators can set the deletion protection property for each table, which will govern whether a table can be deleted.
  2. Andy_09 👍 5
    Option C
  3. Typewriter101 👍 3 Answered C
    B involves more operations.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

S3 Multi-Region Access Point and Replication Strategy

S-grade

Securing NLB with Security Groups for Minimal Change

S-grade

Most Cost-Effective 7-Year Retention for EBS Snapshots?

S-grade

AWS Forecast vs SageMaker for Time-Series Prediction

S-grade

Practice All SAA-C03 Questions

Access 120 questions with complete answers and detailed explanations.

View Full SAA-C03 Practice Test →

← Back to SAA-C03 Study Guide