title: AWS DynamoDB with Cognito user-scoped access?
body: <p>I am using AWS Cognito for user management. I want users of my application to store their data in DynamoDB. So I need user-scoped access (User A can write data and only read data added by User A, User B being able to only read data added by User B).</p>
  <p>Docs suggest the ability to have row-level and column-level fine grain access: (<a href="https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/specifying-conditions.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/specifying-conditions.html</a>).</p>
  <p>BUT I am not using IAM, I am using Congito users (want it scoped to each user, not a Role/Group). This doc suggests you can use Cognito ID: (<a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_dynamodb_items.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_dynamodb_items.html</a>).</p>
  <p>However, according to this StackOverflow question (<a href="https://stackoverflow.com/questions/38731723/how-to-use-dynamodb-fine-grained-access-control-with-cognito-user-pools">How to use DynamoDB fine grained access control with Cognito User Pools?</a>), it's not what I am expecting?</p>
  <p>Does AWS support my use-case? Lot of docs but its not clear if my use-case is supported.</p>