Building an API – Consuming DynamoDB Data

What is DynamoDB?

Amazon’s fully managed NoSQL database service.

What is the goal of this lesson?

To build a Lambda function that reads data from a DynamoDB table and exposes it through an API.

Where does DynamoDB exist relative to VPCs?

Outside of your VPC.

Why is this important for security?

DynamoDB does not use VPC networking, Lambda cannot access it through security groups or subnets. Instead, security must be enforced through IAM permissions that explicitly allow or deny read access.You need IAM permissions

Why do we need an IAM role for DynamoDB?

Lambda must have explicit permission to read DynamoDB items.

What AWS service type do we choose when creating the IAM role?

AWS service (because Lambda is calling it).

What use case do we select when creating the IAM role?

Lambda.

How do we add DynamoDB permissions to the role?

Add an inline policy.

What is the purpose of the inline policy?

To allow Lambda to read items from the Students DynamoDB table only.

What structure is the DynamoDB result originally in?

A JSON object.

What should be done after coding the Lambda?

Deploy the function.

How do we expose HelloWorld4 as an API?

Add an API Gateway trigger.

What HTTP method does HelloWorld4 use?

HTTP GET.