Amazon DynamoDB Streams now supports attribute-based access control (ABAC)
Amazon DynamoDB Streams now supports Attribute-Based Access Control (ABAC), allowing tag-based conditions in IAM policies to manage data stream access. This simplifies access management for teams needing to enforce different access levels across multiple applications and environments with fewer IAM policies. Users can attach up to 50 tags per stream, which are managed independently from their parent table tags, providing flexible isolation and compliance. The feature is available in all commercial and AWS GovCloud (US) Regions where DynamoDB Streams are present, at no additional cost.
Features (1) ›
- Attribute-Based Access Control for DynamoDB Streams
DynamoDB Streams now supports Attribute-Based Access Control (ABAC), enabling tag-based conditions in IAM policies to control access to data streams. This allows teams to manage access across multiple applications and environments with finer-grained, scalable control and fewer IAM policies. Up to 50 tags can be attached to each stream, managed independently from parent table tags, to facilitate environment segregation and compliance.
https://aws.amazon.com/about-aws/whats-new/2026/08/amazon-dynamodb-streams-abac/
Related releases
- Enforcing User Authorization Context in Amazon Bedrock AI Agents AWS Security Blog ·
- Amazon DynamoDB adds general availability for real-time vector search AWS What's New ·
- DynamoDB adds real-time vector search for scalable similarity searches AWS News Blog ·
- DynamoDB Mapper for Kotlin Now Generally Available on AWS AWS Developer Tools Blog ·
- Amazon GameLift Streams adds IAM role credentials for secure resource access AWS What's New ·
- AWS Glue adds SAP OData connector and zero-ETL to GovCloud regions AWS What's New ·