AWS Security & IAM

Security and Fine Grained Access Control (FGAC) in DynamoDB

  1. Fine Grained Access Control (FGAC) gives a DynamoDB table owner a high degree of control over data in the table.

  2. The table owner can indicate who (caller) can access which items or attributes of the table and perform what actions (read / write capability).

  3. FGAC is used in concert with AWS IAM, which manages the security credentials and the associated permissions.

Authenticating DynamoDB Using Web Identity Providers

Using AssumeRoleWithWebIdentity API you can authenticate users using web identity providers such as Amazon, Google, Facebook or any other open-id compatible identity provider.


Following steps need to be completed first:

  1. Go to IAM

  2. Click on Create New Role

  3. Select Role for identity provider access

  4. Select grant access to identity providers

AWS Certificate Manager Overview

Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates are used to secure network communications and establish the identity of websites over the Internet.

AWS Certificate Manager is a service that lets you easily provision, manage, and deploy SSL/TLS certificates for use with AWS services.

AWS Certificate Manager removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates.

Security Groups and EC2

A security group acts as a virtual firewall that controls the traffic for one or more instances. When you launch an instance, you associate one or more security groups with the instance. To decide whether to allow traffic to reach an instance, AWS evaluate all the rules from all the security groups that are associated with the instance.

Security groups are not just limited to EC2, but can be used with other services such as RDS.


S3 Encryption Overview

S3 supports server side and client side Encryption. Two types of Encryption: In transit, At rest.

Encryption details can be specified while uploading file.


Encryption In Transit (SSL/TLS)

You can securely upload/download your data to Amazon S3 via SSL endpoints using the HTTPS protocol. 


Encryption At Rest

Server Side Encryption

Type Of Security Credentials in AWS - Singon, Access and IAM Users

There are different types of security credentials based on how we interact with AWS - Management Console or tools such as CLI or SDKs. 


Signon Credentials: Email and Password

Email and password created during signup are used to login to pages such as the AWS Management Console, AWS discussion forums, or AWS support center.


We learn together, do innovations and then document them at

Offline Contact
We connect physically only in Bengaluru currently, but most of our activities happen online. Please follow us here or in social media for more details.
WhatsApp (Primary): (+91) 7411174113
Phone (Escalations): (+91) 7411174114

Business newsletter

Complete the form below, and we'll send you an e-mail every now and again with all the latest news.

About us

Team Cloudericks is a community started by Heartin Kanikathottu to learn about and master cloud computing. Our current focus is on Amazon Web Servivces. aims to document what we learn. We believe that knowledge is useless unless you share it; the more you share, the more you learn.

Recent comments

Photo Stream