Preventing malicious actions in dynamo DB accessed via lambda over REST

Question

Situation: There is a dynamo DB containing a column with the username, one with a unique ID, and the data for each post submitted via an Angular frontend (REST)