A voter-registration Lambda must PutItem new registrations and Quer…

Question

A voter-registration Lambda must PutItem new registrations and Query by voter ID in DynamoDB while running under the function's execution role. How should the developer implement this?

Accepted Answer

Call DynamoDB PutItem and Query through the AWS SDK in the handler, relying on the Lambda execution role for credentials and least-privilege permissions. — The Lambda role is the badge that opens DynamoDB—no stuffed-in access keys required. Use the AWS SDK for PutItem and Query, and keep the role scoped to just those actions on that table. Nightly CSV dumps and console clicks are not how an Associate developer integrates from code.

Answer

Embed long-lived IAM user access keys in the deployment package and call DynamoDB over unsigned HTTP.

Answer

Export the table to CSV nightly and have Lambda parse files from /tmp instead of using the API.

Answer

Grant the execution role AdministratorAccess and use the DynamoDB console from inside the function.

A voter-registration Lambda must PutItem new registrations and Query by voter ID in DynamoDB while running under the function's execution role. How should the developer implement this?

Short Explanation

Full Explanation