March 2019
Intermediate to advanced
168 pages
4h 33m
English
Now let's look at the following diagram:

DynamoDB is an AWS-managed service and authorization is managed via an IAM permission policy. The IAM policy, which grants or deny access to DynamoDB, is attached to a specific IAM user or role, which can then access it. If you want to assume the role in one AWS account, we also have the option of delegating the permissions for the same, so that they can access a DynamoDB table in a different AWS account. The benefit in that scenario is that no keys are exchanged.
What I recommend is that you apply the least privilege principle when creating these policies for DynamoDB you lock them ...
Read now
Unlock full access