In this article

Overview

Use this account type to connect DynamoDB Snaps with data sources that use DynamoDB accounts. The account now supports the IAM role , which can be selected by using the Authentication Types while when setting up the account.

Prerequisites

...

Limitations and Known Issues

None.

Account Settings

Image Removed

...

...

...

Info

Asterisk ( * ): Indicates a mandatory field. Suggestion icon ( ): Indicates a list that is dynamically populated based on the configuration. Expression icon ( ): Indicates the value is an expression (if enabled) or a static value (if disabled). Learn more about Using Expressions in SnapLogic. Add icon ( ): Indicates that you can add fields in the field set. Remove icon ( ): Indicates that you can remove fields from the field set.

Field Name	Field Type	Field Dependency	Description
Label* Default Value: None Example: DynamoDB IAM Role	String	N/A	Specify a unique label for the account.
AWS Endpoint* Default Value: None Example: xyz876jhnJKBuya9730	String/Expression	N/A	Specify the AWS Endpoint URL. Refer to AWS Service Endpoints for more information.
AWS Region* Default Value: None Example: us-east-1	String/Expression	N/A	Specify the AWS region where the application is running from the allowed values.
Authentication Type	Dropdown List	N/A	Select either of the following Authentication Types to create your DynamoDB Account: User Credentials IAM Role Learn more about DynamoDB Account Configuration Scenarios. Info Cross Account IAM Role settings are available in the Account settings dialog box regardless of the Authentication Type you choose.
AWS Access Key ID Default Value: None Example: us-east-1	String /Expression	Appears when you select User Credentials as Authentication Type.	Specify the Access Key ID associated with your AWS authentication.
AWS Secret Key Default Value: N/A

ABCDEFGHIJKL1MNOPQRSAWS Secret Key

Example: <Encrypted>

String/Expression

Required. Enter the secret key AWS Security Token

	N/A	Specify the Secret Key associated with your AWS authentication.
AWS Security Token Default Value: N/A

aBcdeFGhiJKLM/N1OPQRS/t

Example: <Encrypted>

String/Expression

N/A

Specify the

security token

Security Token to get

temporary

access to AWS resources using

temporary 

credentials. Note that only global Security Token Service (STS) regions are supported.
Cross Account IAM Role	Use this field set to configure the cross-account access. Learn more about

adding signature to the HTTP request - AWS General Reference.N/A

FwoGZXIvYXdzEB0aDFkcmar63IhkrPtdoCLyASlG9Sc
L8XqQ4OUDYojrrZ9vTBMZq7NykwIMBat1NkmfK
5gci0RGvH3v57aKNLgvY0e91m/F91lxXuj1E7X7s
bXJWrDIsWq7xJ5pBFBiiDsE2F8hE6xfkbj1po9
aie3zEJYpgCv7oyFQiH/hF8qQt1ozicpiUqeERn3Hqj+KazH7PowK
3Bznhw9gwkxqARGYZn7aeTtMgEnpA+Y8DcVY123elFUNr6U2u
V0YDF1M8xwQTAt3YcULEWYMWni0XSJs/a7nsQGgC1BxT9WM
6XnaMfq1MZ+jAopb3cZKrBvdO9AGSJ8bT5rnx8mZcXnmLjYWVZ
niKKr1lpQGMiuvAzTrqh2+1vRkZ7tkExBFy0nqJSmJLtm0ywGYurYQ++na7yeQxd026Ne6

AWS End PointString/ExpressionRequired. Enter the AWS end point URL. See AWS Service end points for more information.N/Adynamodb.us-west-1.amazonaws.comAWS RegionString/Expression

Enter the AWS region where the application is running. Allowed values are:

• us-east-1
• us-west-1
• us-west-2
• eu-west-1
• eu-central-1
• ap-southeast-1
• ap-southeast-2
• ap-northeast-1
• sa-east-1

N/Aap-northeast-1

Account Encryption

...

Standard Encryption

...

If you are using Standard Encryption, the High sensitivity settings under Enhanced Encryption are followed.

...

Enhanced Encryption

...

If you have the Enhanced Encryption feature, the account fields are encrypted for each sensitivity level as shown below for this account:

• High: AWS access key ID, AWS secret key

• Medium + High: AWS access key ID, AWS secret key

• Low + Medium + High: AWS access key ID, AWS secret key

...

DynamoDB Account Configuration Scenarios

DynamoDB Permissions

The ListTables permission requires all resources (*) to be selected (as because it needs to be able to list all the DynamoDB tables), but the others can have policies that are more limited (for example, to a particular specific table) as per the DynamoDB API Permissions reference. The  Following is the most basic and permissive Policy document that could be assigned to the user that would guarantee all the required permissions are granted would be:.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Stmt1482439123852",
      "Action": [
        "dynamodb:BatchGetItem",
        "dynamodb:BatchWriteItem",
        "dynamodb:DescribeTable",
        "dynamodb:ListTables",
        "dynamodb:Scan",
        "dynamodb:UpdateItem"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}

Troubleshooting

...

Insert excerpt
DynamoDB Snap Pack DynamoDB Snap Pack nopanel true

Related Content

• Configuring DynamoDB Accounts

• SnapLogic Product Glossary

• Getting

  started

  Started with SnapLogic