Amazon DynamoDB: Role-based IAM Auth with External ID
Amazon DynamoDB destinations now support role-based IAM authentication with an External ID, preventing the confused deputy problem. Users can enable role-based auth via a toggle that generates a Fivetran-managed External ID to add to their AWS IAM trust policy, ensuring only their Fivetran account can assume the role.
Amazon DynamoDB now supports role-based IAM authentication with an External ID to prevent the confused deputy problem.
When setting up a DynamoDB destination, you can now enable the Use Role-based Auth toggle. This generates a Fivetran-managed External ID (a 24-character base58 string) that you add to your AWS IAM trust policy alongside your Role ARN. Fivetran uses this External ID when assuming the role, ensuring only your Fivetran account can do so.
Legacy access-key connections are unaffected.
Source: original entry ↗