The Amazon DynamoDB connector is a Palantir-provided driver for Amazon DynamoDB.
To create a new Amazon DynamoDB source, follow the standard setup flow for Palantir-provided drivers, then use the sections below for Amazon DynamoDB-specific configuration and networking. For the complete property reference, see the official Amazon DynamoDB driver documentation ↗.
| Capability | Status |
|---|---|
| Exploration | 🟢 Generally available |
| Batch syncs | 🟢 Generally available |
| Incremental | 🟢 Generally available |
| Table exports | 🟢 Generally available |
The properties below are mandatory or recommended.
| Property | Required? | Description | Default |
|---|---|---|---|
AuthScheme ↗ | Mandatory | Specifies the type of authentication to use when connecting to Amazon DynamoDB. If this property is left blank, the default authentication is used. | AwsRootKeys |
AWSAccessKey ↗ | Recommended | Specifies your AWS account access key. This value is accessible from your AWS security credentials page. | — |
AWSRegion ↗ | Recommended | The hosting region for your Amazon Web Services. | NORTHERNVIRGINIA |
AWSSecretKey ↗ | Recommended | Your AWS account secret key. This value is accessible from your AWS security credentials page. | — |
Domain ↗ | Recommended | Specifies your AWS domain name. Use this property to set a custom domain name if your organization has associated one with AWS. | amazonaws.com |
The table below lists the domains that the source must be able to access to run.
For each domain, add a corresponding egress policy. If the source is hosted on-premises and not directly reachable from Foundry, use an agent proxy egress policy instead. The agent host itself must also be able to reach the listed domains. See using an agent as a proxy for details.
| Domain | Required |
|---|---|
| dynamodb.<AWSRegion>.<domain> | Always. AWSRegion Mappings |
| sts.<Region>.amazonaws.<TLD> | If AuthScheme=AwsIAMRoles,AwsMFA,TemporaryCredentials |
| cognito-idp.<AWSCognitoRegion>.amazonaws.<TLD> | If AuthScheme=AwsCognitoBasic,AwsCognitoSrp |
| cognito-identity.<AWSCognitoRegion>.amazonaws.<TLD> | If AuthScheme=AwsCognitoBasic,AwsCognitoSrp |
| <SSOLoginURL> | If AuthScheme=Okta,ADFS,PingFederate, use SSOLoginURL property |
| <Resource> | If AuthScheme=AzureAD, Resource set in SSOProperties |
| <SSOExchangeURL> | If AuthScheme=Okta |
This connector supports table exports. Learn how to set up a table export.