## Troubleshooting Amazon DynamoDB connectivity

URL: https://docs.atlan.com/apps/connectors/database/amazon-dynamodb/troubleshooting/troubleshooting-amazon-dynamodb-connectivity

> Learn about troubleshooting amazon dynamodb connectivity.

#### What are the known limitations of the Amazon DynamoDB connector?

Atlan currently does not support cataloging attributes for Amazon DynamoDB tables as native assets in Atlan. Hence, column-level lineage between Amazon DynamoDB as a source and supported data warehouses is currently not supported.

#### Why are some tables and indexes missing?

- Check that the [IAM user](https://docs.atlan.com/llms/connectors/amazon-dynamodb/set-up-amazon-dynamodb/llms.txt) defined for the crawler has been granted the `dynamodb:DescribeTable` permission on the missing tables.
- To grant permission on all DynamoDB tables in your selected AWS region, add the following to the IAM policy to `Resource` in the `dynamodb:DescribeTable` permission: `arn:aws:dynamodb:<region>:<account_id>:table/*`
- Check that the names of the missing tables do not match the table names in the [_Exclude tables regex_ filter](https://docs.atlan.com/llms/connectors/amazon-dynamodb/crawl-amazon-dynamodb/llms.txt), if you have specified tables to exclude.

#### Why are some attributes missing from the table asset profile?

The _Attributes_ section in the table asset profile of an Amazon DynamoDB table lists all the attributes that are either used as a partition key or a sort key in the table itself or its global or local secondary indexes.

For example:

- The `Orders` table has a partition key `OrderID` and a sort key `ProductID`.
- This table also has a global secondary index with the partition key `CustomerID`.
- Keeping this in mind, the _Attributes_ section in the table asset profile will display the following attributes only:
 - `OrderID`
 - `ProductID`
 - `CustomerID`

#### How to debug test authentication and preflight check errors?

**Invalid region**

`Invalid region. Please provide a valid region.`

- Ensure that you have specified the correct [AWS region in your configuration](https://docs.atlan.com/llms/connectors/amazon-dynamodb/crawl-amazon-dynamodb/llms.txt). The region must match the location of your Amazon DynamoDB tables.

**Invalid secret key**

`Invalid secret key. Please provide a valid secret key.`

- Ensure that the [AWS access key ID matches the secret key](https://docs.atlan.com/llms/connectors/amazon-dynamodb/set-up-amazon-dynamodb/llms.txt). These must be paired correctly and belong to the same IAM user.

**Invalid access key**

`Invalid access key. Please provide a valid access key.`

- Ensure that the [AWS access key ID matches the secret key](https://docs.atlan.com/llms/connectors/amazon-dynamodb/set-up-amazon-dynamodb/llms.txt). These must form a valid pair.
- Ensure that the IAM user associated with the access key is active and neither disabled nor deleted.

**No tables detected in the selected region**

`No tables detected in the selected region. Please check the selected region.`

- Ensure that you have specified the correct [AWS region in your configuration](https://docs.atlan.com/llms/connectors/amazon-dynamodb/crawl-amazon-dynamodb/llms.txt). The region must match the location of your Amazon DynamoDB tables.
- Confirm that the IAM user or role you are using has the [necessary permissions](https://docs.atlan.com/llms/connectors/amazon-dynamodb/set-up-amazon-dynamodb/llms.txt) (`dynamodb:ListTables`) to view Amazon DynamoDB tables in the specified region.

**Access denied: 'ListTables' permission required**

`Access denied: 'ListTables' permission required. Please reach out to your AWS administrator to request the permissions.`

- Ensure that the IAM policy attached to your role includes the `dynamodb:ListTables` permission.
- Confirm that the role has the permissions to list tables.
- If you do not have the permission to update IAM policies, reach out to your AWS administrator to request the necessary permissions.

**Access denied: 'AssumeRole' permission required**

`Access denied: 'AssumeRole' permission required. Please reach out to your AWS administrator to request the permissions.`

- Ensure that the [IAM policy](https://docs.atlan.com/llms/connectors/amazon-dynamodb/set-up-amazon-dynamodb/llms.txt) attached to your user or role includes the `sts:AssumeRole` permission for the role you are trying to assume.
- Confirm that the IAM policy allows access to the specific role ARN you are trying to assume.
- Ensure that the role you are trying to assume has a trust policy allowing your user or role to assume it.

---