HOW TO SECURELY LET FRONTEND APPS DIRECTLY ACCESS AWS SERVICES

Summary from the TLDR InfoSec newsletter

This post presents a cost-minimization approach that utilizes Cognito Identity Pools to control authentication and authorization directly from a front-end app. The crux of the solution involves an IAM policy that utilizes DynamoDB Leading Keys to handle user separation. The post includes sample IAM roles and policies, a worked demo, and a list of advantages and disadvantages of this approach.