For accessing DynamoDB, you need credentials. The credentials should have the permission to access the DynamoDB table. This section provides details on how you can use Identity and Access Management (IAM) to secure DynamoDB resources.
There are a number of ways in which you can access DynamoDB resources:
- AWS root user account
- IAM user
- IAM role:
- Identity federation
- Cross-account access
- AWS service access
- Application running on EC2
If you have valid credentials that can authenticate against DynamoDB, you can initiate the request to access, but unless you have permissions associated with your credentials, you cannot perform any operation against DynamoDB. For example, for creating a new DynamoDB table, you need to have the table creation permission.
Before understanding these permissions, let's understand the resources in DynamoDB...