Search⌘ K
Home
Courses
DynamoDB Deep Dive: NoSQL for Software Engineers

Demo: Access management

Understand how to manage access in DynamoDB by creating IAM policies and users. Learn the step-by-step process of assigning permissions, verifying user access, and ensuring secure AWS Management Console login for DynamoDB operations.

We'll cover the following...

Policy

We have already learned how to create policies. Before proceeding, we will create the following policy and name it DemoDynamodbPolicy.

C++
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "dynamodb:GetItem",
                "dynamodb:Query",
                "dynamodb:Scan"
            ],
            "Resource": [
                "arn:aws:dynamodb:*:<AWS Root Account Id>:table/*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "dynamodb:Describe*",
                "dynamodb:List*"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

We’ll use the command given below to create the required IAM policy:

aws iam create-policy \
    --policy-name DemoDynamodbPolicy \
    --policy-document file://usercode/policy.json

Note: If this command throws the following error, An error occurred (AccessDenied) when calling the CreatePolicy operation, we’re not authorized to create an IAM policy. The required policy already exists in our account in that case.

We’ll be using this ...