Skip to main content

​
Add the Amazon DynamoDB Connector

​
Authenticate to Amazon DynamoDB

After you add the connector, you need to set the required properties. CData Sync supports authenticating to Amazon DynamoDB in several ways. Select your authentication method below to proceed to the relevant section that contains the authentication details.

​
Active Directory Federation Services

To connect with single sign-on (SSO) via ADFS, specify the following properties:

  • Auth Scheme: Select ADFS.
  • User: Enter the username that you use to authenticate to your ADFS account.
  • Password: Enter the password that you use to authenticate to your ADFS account.
  • SSO Login URL: Enter the login URL that is used by your SSO provider.
  • SSO Properties: Enter a semicolon-separated list of the single sign-on (SSO) properties that you want to use (for example, SSOProperty1=Value1;SSOProperty2=Value2;...).
  • SSO Exchange UrI: Enter the Partner Service Identifier URI that is configured in your PingFederate server instance. The URI is available under SP Connections > SP Connection > WS-Trust > Protocol Settings.
  • (Optional) Use Lake Formation: Select True if you want the AWS Lake Formation service to retrieve temporary credentials. These temporary credentials enforce access policies against the user based on the configured IAM role. You can use this service when you authenticate through Okta, ADFS, and PingFederate, while providing a Security Assertion Markup Language (SAML) assertion. The default setting for Use Lake Formation is False.

​
AWS Root Keys

​
AWS IAM Roles

​
AWS EC2 Roles

​
AWS Multifactor Authentication

To connect with your multifactor authentication credentials, specify the following properties:

  • Auth Scheme: Select AwsMFA.
  • MFA Serial Number: Enter the serial number for your multifactor authentication (MFA) device, if you are using such a device.
  • MFA Token: Enter the temporary token that is available from your MFA device.
  • (Optional) Temporary Token Duration: Enter the amount of time (in seconds) a temporary token will last. The default duration is 3600.

​
AWS Credentials File

​
Okta

  • (Optional) Use Lake Formation: Select True if you want the AWS Lake Formation service to retrieve temporary credentials. These temporary credentials enforce access policies against the user based on the configured IAM role. You can use this service when you authenticate through Okta, ADFS, and PingFederate, while providing a Security Assertion Markup Language (SAML) assertion. The default setting for Use Lake Formation is False.

​
PingFederate

To connect with single sign-on via PingFederate, specify the following properties:

  • Auth Scheme: Select PingFederate.
  • User: Enter the username that you use to authenticate to your PingFederate account.
  • Password: Enter the password that you use to authenticate to your PingFederate account.
  • SSO Login URL: Enter the login URL that is used by your SSO provider.
  • SSO Properties: Enter a comma-separated list of the single sign-on (SSO) properties that you want to use (for example, SSOProperty1=Value1;SSOProperty2=Value2;...).
  • SSO Exchange UrI: Enter the Partner Service Identifier URI that is configured in your PingFederate server instance. The URI is available under SP Connections > SP Connection > WS-Trust > Protocol Settings.
  • (Optional) Use Lake Formation: Select True if you want the AWS Lake Formation service to retrieve temporary credentials. These temporary credentials enforce access policies against the user based on the configured IAM role. You can use this service when you authenticate through Okta, ADFS, and PingFederate, while providing a Security Assertion Markup Language (SAML) assertion. The default setting for Use Lake Formation is False.

​
AWS Cognito Basic

To connect with your Amazon Web Services (AWS) Cognito credentials, specify the following properties:

  • Auth Scheme: Select AwsCognitoBasic.
  • User: Enter the username of the user that is registered in the user pool.
  • Password: Enter the password of the user that is registered in the user pool.
  • AWS Cognito Region: Select the region for your Amazon Web Services (AWS) user pool. The default region is NORTHERNVIRGINIA.
  • AWS User Pool Id: Enter your AWS user-pool identifier (Id).
  • AWS User Pool Client App Id: Enter your AWS user-pool client application Id.
  • (Optional) AWS User Pool Client App Secret: Enter the secret for your user-pool client.

​
AWS Cognito Secure Remote Password

To connect with your Amazon Web Services (AWS) Cognito credentials, specify the following properties:

  • Auth Scheme: Select AwsCognitoSrp.
  • User: Enter the username of the user that is registered in the user pool.
  • Password: Enter the password of the user that is registered in the user pool.
  • AWS Cognito Region: Select the hosting region for Amazon Web Services (AWS) Cognito. The default region is NORTHERNVIRGINIA.
  • AWS User Pool Id: Enter your AWS user-pool identifier (Id).
  • AWS User Pool Client App Id: Enter your AWS user-pool client application Id.
  • (Optional) AWS User Pool Client App Secret: Enter the secret for your user-pool client.
  • AWS Region: Select the hosting region for your Amazon Web Services. The default region is NORTHERNVIRGINIA.

​
Complete Your Connection

To complete your connection:
  1. For AWS Region, select the region that hosts your Amazon Web Services. The default region is NORTHERNVIRGINIA.
  2. Define advanced connection settings on the Advanced tab. (In most cases, though, you should not need these settings.)
  3. Click Create & Test to create your connection.

​
More Information