SourceAmazon DynamoDB Streams now supports attribute-based access control
Administrators can use fewer IAM policies to enforce security levels across different environments and teams. This allows for scalable, fine-grained control over who can access specific production or test streams.
- Amazon DynamoDB Streams supports attribute-based access control (ABAC) using tag-based conditions in IAM policies.
- Users can attach up to 50 tags per stream to control access permissions across multiple applications and teams.
- Stream tags are managed independently from parent table tags to support environment segregation, team-based isolation, and compliance.
- The feature is available in all commercial AWS Regions and AWS GovCloud (US) Regions where Amazon DynamoDB Streams is available.
- Attribute-based access control for DynamoDB Streams is provided at no additional cost.