amazon iam - DynamoDb access for unauthenticated users -
i want store analytical information use of mobile apps amazon dynamodb. have following requirements: exactly 1 dynamodb table per 1 mobile app an app can putitem method all users of apps unauthenticated (guests) to provide mobile apps way access table in dynamodb see 2 options: hardcode credentials limited permissions apps (permissions putitem specific table); use amazon cognito temporary credentials unauthenticated users in runtime. the second option amazon recommends more secure. in case malicious user can either access hardcoded credentials or hardcoded identity pool id same result: getting access aws resource. question: use of cognito in case give security improvements , if yes, how? cognito identity totally free - wouldn't have pay anything. your point using cognito doesn't add security unauthenticated requests isn't correct. cognito faqs: q: how cognito identity me access aws services securely? cognito identity assigns users set