# Amazon DynamoDB

<!-- BEGIN GENERATED:intro -->

The Amazon DynamoDB connector is a [Palantir-provided driver](../../data-integration/foundry-provided-drivers/index.md) for Amazon DynamoDB.

To create a new Amazon DynamoDB source, follow the [standard setup flow for Palantir-provided drivers](../../data-integration/foundry-provided-drivers/index.md#setup), then use the sections below for Amazon DynamoDB-specific configuration and networking. For the complete property reference, see the [official Amazon DynamoDB driver documentation ↗](https://cdn.cdata.com/help/DDK/jdbc/pg_connectionj.htm).

<!-- END GENERATED:intro -->

<!-- BEGIN GENERATED:capabilities -->

## Supported capabilities

| Capability | Status |
|---|---|
| Exploration | 🟢 Generally available |
| Batch syncs | 🟢 Generally available |
| Incremental | 🟢 Generally available |
| [Table exports](#table-exports) | 🟢 Generally available |

<!-- END GENERATED:capabilities -->

<!-- BEGIN GENERATED:configuration -->

## Configuration

The properties below are mandatory or recommended.

| Property | Required? | Description | Default |
|---|---|---|---|
| [`AuthScheme` ↗](https://cdn.cdata.com/help/DDK/jdbc/RSBDynamoDB_p_AuthScheme.htm) | Mandatory | Specifies the type of authentication to use when connecting to Amazon DynamoDB. If this property is left blank, the default authentication is used. | `AwsRootKeys` |
| [`AWSAccessKey` ↗](https://cdn.cdata.com/help/DDK/jdbc/RSBDynamoDB_p_AWSAccessKey.htm) | Recommended | Specifies your AWS account access key. This value is accessible from your AWS security credentials page. | — |
| [`AWSRegion` ↗](https://cdn.cdata.com/help/DDK/jdbc/RSBDynamoDB_p_AWSRegion.htm) | Recommended | The hosting region for your Amazon Web Services. | `NORTHERNVIRGINIA` |
| [`AWSSecretKey` ↗](https://cdn.cdata.com/help/DDK/jdbc/RSBDynamoDB_p_AWSSecretKey.htm) | Recommended | Your AWS account secret key. This value is accessible from your AWS security credentials page. | — |
| [`Domain` ↗](https://cdn.cdata.com/help/DDK/jdbc/RSBDynamoDB_p_Domain.htm) | Recommended | Specifies your AWS domain name. Use this property to set a custom domain name if your organization has associated one with AWS. | `amazonaws.com` |

<!-- END GENERATED:configuration -->

<!-- BEGIN GENERATED:networking -->

## Networking

The table below lists the domains that the source must be able to access to run.

For each domain, add a corresponding [egress policy](../../administration/configure-egress/index.md). If the source is hosted on-premises and not directly reachable from Foundry, use an [agent proxy egress policy](../../administration/configure-egress/index.md#agent-proxy-egress-policies) instead. The agent host itself must also be able to reach the listed domains. See [using an agent as a proxy](../../data-connection/agent-proxy/index.md) for details.

| Domain  | Required |
|--- |--- |
| dynamodb.\<AWSRegion>.\<domain> | Always. AWSRegion Mappings |
| sts.\<Region>.amazonaws.\<TLD> | If `AuthScheme=AwsIAMRoles,AwsMFA,TemporaryCredentials` |
| cognito-idp.\<AWSCognitoRegion>.amazonaws.\<TLD> | If `AuthScheme=AwsCognitoBasic,AwsCognitoSrp` |
| cognito-identity.\<AWSCognitoRegion>.amazonaws.\<TLD> | If `AuthScheme=AwsCognitoBasic,AwsCognitoSrp` |
| \<SSOLoginURL> | If `AuthScheme=Okta,ADFS,PingFederate,` use SSOLoginURL property |
| \<Resource> | If `AuthScheme=AzureAD,` Resource set in SSOProperties |
| \<SSOExchangeURL> | If `AuthScheme=Okta` |

<!-- END GENERATED:networking -->

<!-- BEGIN GENERATED:table-exports -->

## Table exports

This connector supports table exports. Learn how to [set up a table export](../../data-connection/export-overview/index.md#table-exports).

<!-- END GENERATED:table-exports -->