How to Generate AWS DynamoDB Credential Key with STS API which is Limited to Insert and Update One Key/Row

Question

Amazons STS allows to create credentials for DynamoDB. I do know how to create time limited (15min - 1h) crediential keys.

However I was wondering whether it is possible to generate a DynamoDB key which is allowed/limited to insert and update only one key/row/record?

Answer 1

Yes, you can write a policy to restrict access to specific keys via fine-grained access control.