DynamoDB

The DynamoDB data connector allows you to ingest data from an existing DynamoDB table in an AWS account. If the table is from a different AWS account other than where ADA solution is deployed, you must provide a Cross Account Role Arn. This IAM role needs to be provisioned in the account where DynamoDB table is located and have proper permissions to allow ADA to access it. For more information, refer to the Working with cross accounts section.

To import data from DynamoDB:

1. On the details page, under Amazon DynamoDB, enter the DynamoDB table stream arn. ADA will automatically validate the Arn via an API call to ensure it can retrieve data from the database table. If the table is from a different AWS account, it will display an additional field to request Cross Account Role.

   

   Microsoft SQL Server connector

2. Under the Data updates section, select On Demand, and select Next. The Schema page displays.

3. (Optional) To transform your schema, or select Continue with Current Schema, and Submit. This will start the workflow to import the data, making it available to be queried.

Working with cross accounts

If your DynamoDB table will be imported from a separate account than where the ADA stack is deployed, you will need to provide the Cross Account Role Arn when you enter the Dynamo Table Arn. Use this script to set up the Cross Account IAM role in the account where you have the DynamoDB table.

{
  "Version": "2012-10-17",
  "Statement": [
    {
    "Effect": "Allow",
    "Principal": {
    "AWS": "<AWS account number that Ada solution deployed>"
    },
  "Action": []"sts:AssumeRole", "sts:TagSession"]
}
]
}

Set the identity policy using this script.

{
  "Version": "2012-10-17",
  "Statement": [
    {
    "Effect": "Allow",
    "Action": [
        "dynamodb:GetItem",
        "dynamodb:BatchGetItem",
        "dynamodb:Scan",
        "dynamodb:Query",
        "dynamodb:ConditionCheckItem",
    ],
  "Resource": "<ARN of the DynamoDB table to be imported>"
  }
  ]
}