The Amazon DynamoDB connector is a Palantir-provided driver for Amazon DynamoDB.
To create a new Amazon DynamoDB source, follow the standard setup flow for Palantir-provided drivers, then use the sections below for Amazon DynamoDB-specific configuration and networking. For the complete property reference, see the official Amazon DynamoDB driver documentation ↗.
The properties below are mandatory or recommended.
| Property | Required? | Description | Default |
|---|---|---|---|
AuthScheme ↗ | Mandatory | Specifies the type of authentication to use when connecting to Amazon DynamoDB. If this property is left blank, the default authentication is used. | AwsRootKeys |
AWSAccessKey ↗ | Recommended | Specifies your AWS account access key. This value is accessible from your AWS security credentials page. | — |
AWSRegion ↗ | Recommended | The hosting region for your Amazon Web Services. | NORTHERNVIRGINIA |
AWSSecretKey ↗ | Recommended | Your AWS account secret key. This value is accessible from your AWS security credentials page. | — |
Domain ↗ | Recommended | Specifies your AWS domain name. Use this property to set a custom domain name if your organization has associated one with AWS. | amazonaws.com |
The table below lists the domains that the source needs to be able to access in order to successfully run.
For each domain, add a corresponding egress policy. If the source is hosted on-premises and not directly reachable from Foundry, use an agent proxy egress policy instead; the agent host itself must also be able to reach the listed domains. See using an agent as a proxy for details.
| Domain | Required |
|---|---|
| dynamodb.<AWSRegion>.<domain> | Always. AWSRegion Mappings |
| sts.<Region>.amazonaws.<TLD> | If AuthScheme=AwsIAMRoles,AwsMFA,TemporaryCredentials |
| cognito-idp.<AWSCognitoRegion>.amazonaws.<TLD> | If AuthScheme=AwsCognitoBasic,AwsCognitoSrp |
| cognito-identity.<AWSCognitoRegion>.amazonaws.<TLD> | If AuthScheme=AwsCognitoBasic,AwsCognitoSrp |
| <SSOLoginURL> | If AuthScheme=Okta,ADFS,PingFederate, use SSOLoginURL property |
| <Resource> | If AuthScheme=AzureAD, Resource set in SSOProperties |
| <SSOExchangeURL> | If AuthScheme=Okta |