Fine-grained access control for AWS DynamoDB using AWS Cognito

Question

I am developing a simple application (ios) where each user can send simple messages (each of them composed of a few data slots, all strings for the moment) to other users (t

Answer 1

If you need to use the user's facebook id, use Web Identity Federation. The doc is a bit dated, but the aws mobile and js sdks provide a web identity credentials provider.

This approach should work if you allow write access to all keys and read access only to facebook id tied to the credentials.