DynamoDB IAM policy constraints and STS credential expiry symptoms
A multi-tenant architecture utilizes IAM roles and temporary STS credentials to access DynamoDB tables. The design goal is least-privilege access, restricting actions like GetItem , PutItem , and Query to specific table and index ARNs using Signature Version 4 authentication. There is uncertainty regarding the boundary between infrastructure-level security a