The Amazon Resource Name of the role to use when authenticating. Multiple roles can be specified separated by semicolons for role chaining.

Data Type

string

Default Value

""

Remarks

When authenticating outside of AWS, it is common to use a Role for authentication instead of your direct AWS account credentials. Entering the AWSRoleARN will cause the CData ADO.NET Provider for Amazon DynamoDB to perform a role based authentication instead of using the AWSAccessKey and AWSSecretKey directly. The AWSAccessKey and AWSSecretKey must still be specified to perform this authentication. You cannot use the credentials of an AWS root user when setting RoleARN. The AWSAccessKey and AWSSecretKey must be those of an IAM user.

Role Chaining

To perform role chaining, specify multiple role ARNs separated by semicolons. The roles will be assumed in sequence, with each subsequent role being assumed using the temporary credentials from the previous role. For example:

arn:aws:iam::111111111111:role/RoleA;arn:aws:iam::222222222222:role/RoleB

This will first assume RoleA using the IAM user credentials, then assume RoleB using RoleA's temporary credentials.