Connect to Amazon DynamoDB

Sign in to the AWS Management Console and open the DynamoDB console at https://console.aws.amazon.com/dynamodb/.

We recommend using the administrative user created in Create an administrative user for managing AWS resources.

In the left navigation pane, choose Tables.

Choose Create table.

Enter a name and keys for your table.

Choose Create table.

After your table is created, add some items to it so they will appear once the table is connected to App Studio.

1. Choose your table, choose Actions, and choose Explore items.

2. In Items returned, choose Create item.

3. (Optional): Choose Add new attribute to add more attributes to your table.

4. Enter values for each attribute and choose Create item.

Sign in to the IAM console with a user that has permissions to create IAM policies. We recommend using the administrative user created in Create an administrative user for managing AWS resources.

In the left-side navigation pane, choose Policies.

Choose Create policy.

In the Policy editor section, choose the JSON option.

Type or paste in a JSON policy document. The following tabs contain example policies for read only and full access to DynamoDB tables, along with examples of policies that include AWS KMS permissions for DynamoDB tables encrypted with an AWS KMS customer-managed key (CMK).

Choose Next.

On the Review and create page, provide a Policy name, such as ReadOnlyDDBForAppStudio or FullAccessDDBForAppStudio, and Description (optional).

Choose Create policy to create the policy.

Sign in to the IAM console with a user that has permissions to create IAM roles. We recommend using the administrative user created in Create an administrative user for managing AWS resources.

In the navigation pane of the console, choose Roles and then choose Create role.

In Trusted entity type, choose Custom trust policy.

Replace the default policy with the following policy to allow App Studio applications to assume this role in your account.

You must replace the following placeholders in the policy. The values to be used can be found in App Studio, in the Account settings page.

{ 
    "Version": "2012-10-17",
    "Statement": [
        { 
            "Effect": "Allow",
            "Principal": { 
                "AWS": "arn:aws:iam::111122223333:root"
            }, 
            "Action": "sts:AssumeRole",
            "Condition": {
                "StringEquals": {
                        "aws:PrincipalTag/IsAppStudioAccessRole": "true",
                        "sts:ExternalId": "11111111-2222-3333-4444-555555555555"
                }
            }
        } 
    ]
}

Choose Next.

In Add permissions, search for and select the policy that you created in the previous step (ReadOnlyDDBForAppStudio or FullAccessDDBForAppStudio). Choosing the + next to a policy will expand the policy to show the permissions granted by it and choosing the checkbox selects the policy.

Choose Next.

On the Name, review, and create page, provide a Role name and Description.

In Step 3: Add tags, choose Add new tag to add the following tag to provide App Studio access:

Choose Create role and make note of the generated Amazon Resource Name (ARN), you will need it when creating the DynamoDB connector in App Studio.

Navigate to App Studio.

In the left-side navigation pane, choose Connectors in the Manage section. You will be taken to a page displaying a list of existing connectors with some details about each.

Choose + Create connector.

Choose Amazon DynamoDB from the list of connector types.

Configure your connector by filling out the following fields:

Choose Next. Review the connection information and choose Create.

The newly created connector will appear in the Connectors list.