Design Secure Applications and Architectures

Question 1

Securely connect EC2 instance to DynamoDB table

Answer 1

Use an IAM role to manage temporary credentials for applications that are running on an EC2 instance and making AWS CLI or AWS API requests. This is preferable to storing access keys within the EC2 instance.

Question 2

DynamoDB security Best Practices

Answer 2

1) Encryption at rest (All user data stored in Amazon DynamoDB is fully encrypted at rest - client needs to choose key management preference)
2) Use IAM roles to authenticate access to DynamoDB
3) Use IAM policies for DynamoDB base authorization
4) Use IAM policy conditions for fine-grained access control
5) Use a VPC endpoint and policies to access DynamoDB
6) Consider client-side encryption