Read-only AWS access with zero table-data exposure
Learn how Dynasight analyzes DynamoDB metadata and metrics without access to table-item contents or AWS write permissions.
What AWS access does Dynasight need?
Dynasight uses a least-privilege IAM role to analyze table and index metadata, capacity, usage metrics, and cost signals. The role excludes item-level read APIs and all write permissions, so Dynasight cannot access the records inside your tables or change your AWS account.
- No GetItem, BatchGetItem, Query, or Scan access.
- No table, index, or item write permissions.
- Customer records and application data never leave DynamoDB.
Access model
Dynasight can inspect infrastructure signals—not your records
DynamoDB cost optimization does not require access to the contents of your tables. Dynasight uses metadata and operational metrics to generate findings while your customer records, application data, and values remain inside DynamoDB.
- No GetItem, BatchGetItem, Query, or Scan permissions.
- No DynamoDB item, table, or index write permissions.
- No automatic AWS changes of any kind.
- Findings are recommendations for engineering review.
What teams should document internally
Keep the IAM role purpose, permissions, owner, rotation process, and review cadence visible in your cloud security process. Dynasight can support a safer workflow, but your AWS governance still matters.
FAQ
Common questions
Can Dynasight read items in my DynamoDB tables?
No. The Dynasight IAM role does not grant GetItem, BatchGetItem, Query, or Scan. Dynasight analyzes metadata and operational metrics without accessing table-item contents.
Does Dynasight need write access?
No. Dynasight has no AWS write permissions and cannot change DynamoDB tables, indexes, or records.
Can Dynasight delete a GSI?
No. Dynasight can flag an unused GSI candidate for review, but the engineering team controls any index changes.
Is read-only access enough for cost analysis?
Yes for analysis and recommendation workflows. Remediation remains a separate engineering action.
Keep exploring
Related DynamoDB optimization topics
Dynasight
Find DynamoDB waste before it becomes normal.
Connect read-only AWS access and turn DynamoDB cost, monitoring, and table design signals into prioritized engineering actions.
