Troubleshooting Amazon DynamoDB connectivity

What are the known limitations of the Amazon DynamoDB connector?

Atlan currently does not support cataloging attributes for Amazon DynamoDB tables as native assets in Atlan. Hence, column-level lineage between Amazon DynamoDB as a source and supported data warehouses is currently not supported.

Why are some tables and indexes missing?

  • Check that the IAM user defined for the crawler has been granted the dynamodb:DescribeTable permission on the missing tables.
  • To grant permission on all DynamoDB tables in your selected AWS region, add the following to the IAM policy to Resource in the dynamodb:DescribeTable permission: arn:aws:dynamodb:<region>:<account_id>:table/*
  • Check that the names of the missing tables do not match the table names in the Exclude tables regex filter, if you have specified tables to exclude.

Why are some attributes missing from the table asset profile?

The Attributes section in the table asset profile of an Amazon DynamoDB table lists all the attributes that are either used as a partition key or a sort key in the table itself or its global or local secondary indexes.

For example:

  • The Orders table has a partition key OrderID and a sort key ProductID.
  • This table also has a global secondary index with the partition key CustomerID.
  • Keeping this in mind, the Attributes section in the table asset profile will display the following attributes only:
    • OrderID
    • ProductID
    • CustomerID

How to debug test authentication and preflight check errors?

Invalid region

Invalid region. Please provide a valid region.

Invalid secret key

Invalid secret key. Please provide a valid secret key.

Invalid access key

Invalid access key. Please provide a valid access key.

No tables detected in the selected region

No tables detected in the selected region. Please check the selected region.

  • Ensure that you have specified the correct AWS region in your configuration. The region must match the location of your Amazon DynamoDB tables.
  • Confirm that the IAM user or role you are using has the necessary permissions (dynamodb:ListTables) to view Amazon DynamoDB tables in the specified region.

Access denied: 'ListTables' permission required

Access denied: 'ListTables' permission required. Please reach out to your AWS administrator to request the permissions.

  • Ensure that the IAM policy attached to your role includes the dynamodb:ListTables permission.
  • Confirm that the role has the permissions to list tables.
  • If you do not have the permission to update IAM policies, reach out to your AWS administrator to request the necessary permissions.

Access denied: 'AssumeRole' permission required

Access denied: 'AssumeRole' permission required. Please reach out to your AWS administrator to request the permissions.

  • Ensure that the IAM policy attached to your user or role includes the sts:AssumeRole permission for the role you are trying to assume.
  • Confirm that the IAM policy allows access to the specific role ARN you are trying to assume.
  • Ensure that the role you are trying to assume has a trust policy allowing your user or role to assume it.

Related articles

Was this article helpful?
0 out of 0 found this helpful