Amazon DynamoDB (Early Access) connection
Updated
The Amazon DynamoDB connection represents a single AWS account and region. It contains the authentication, endpoint, and region settings. Select Authentication Type to show the fields for that type.
- Access Key: Uses an AWS access key ID and secret key. It is the quickest way to get started, but the credentials are long-lived, so protect and rotate them.
- IAM Roles Anywhere: Recommended by AWS for production use. Instead of a permanent access key, the connector uses a client certificate from your trusted CA to obtain temporary credentials, which lowers the risk if a credential is ever exposed. Choose this if your organization has a certificate authority and a trust anchor set up in AWS.
Connection tab
| Field | Required | Description |
|---|---|---|
| Authentication Type | Mandatory | Select Access Key or IAM Roles Anywhere. Defaults to Access Key. |
| Server | Mandatory | The DynamoDB regional endpoint, in the form https://dynamodb.{region}.amazonaws.com. Defaults to https://dynamodb.us-east-1.amazonaws.com. Update the region to match your table's region. |
| Amazon AWS Access Key | Mandatory (Access Key) | Your IAM user or role access key ID. |
| Amazon AWS Secret Key | Mandatory (Access Key) | Your IAM user or role secret access key. The connection masks this value. |
| Amazon AWS Region | Mandatory | The region where your tables are located. Select from the dropdown, or select Custom. |
| Custom AWS Region | Mandatory when Amazon AWS Region is Custom | The region code when it is not listed in the dropdown. |
| Profile ARN | Mandatory (IAM Roles Anywhere) | The ARN of the IAM Roles Anywhere profile. |
| Role ARN | Mandatory (IAM Roles Anywhere) | The ARN of the IAM role to assume. |
| Trust anchor ARN | Mandatory (IAM Roles Anywhere) | The ARN of the IAM Roles Anywhere trust anchor. |
| AWS Roles Anywhere Region | Mandatory (IAM Roles Anywhere) | The region of your IAM Roles Anywhere service. Select from the dropdown. |
| AWS Roles Anywhere Custom Region | Optional | Overrides the dropdown when set, for example us-east-2. |
| Session name | Optional | A name that identifies the assumed-role session. |
| Duration (in seconds) | Optional | How long the temporary credentials remain valid, from 900 to 3600. Defaults to 900. |
| Public certificate | Mandatory (IAM Roles Anywhere) | The client certificate that your trusted CA issues. |
| Private key | Mandatory (IAM Roles Anywhere) | The private key that pairs with the public certificate. |
| Request Headers | Optional | Extra HTTP headers sent with every request. Do not set AWS protocol headers, such as Authorization, X-Amz-Target, X-Amz-Date, X-Amz-Security-Token, Content-Type, Host, or Content-Length. The connector manages these headers and drops any value you supply. Header names can contain only letters, digits, and hyphens. |
Test connection
You can test your connection settings before you use or save the connection in a process. The Test Connection ensures that your specified settings are correct, valid, and accessible. If the test connection is successful, you can save the connection. Otherwise, review and correct any incorrect settings, then test again.
Attention
You can only run the Test Connection against containers associated with your account (local runtimes, runtime clusters, and runtime clouds).
