# Triagic + DynamoDB: ticket investigations over your database, read-only

> DynamoDB in Triagic: List tables and read items with query, scan, and describe. Read-only, with a credential you configure.

Source: https://triagic.com/integrations/dynamodb

## What you can ask

- Look up account acme-labs in DynamoDB and tell me why their last export failed
- In DynamoDB, how many orders for org 8412 are stuck in a non-terminal state right now?
- Which rows in DynamoDB changed for user 51930 in the last 24 hours?
- Compare the DynamoDB record for invoice INV-2291 with what the customer says they see
- Does DynamoDB show the same plan for this account as the billing system does?

## What the agent can do

Every tool the DynamoDB server annotates as read-only. READ_OPERATIONS_ONLY=true makes the server match every command against AWS's read-only action list before it runs.

## Connect in three steps

1. **Mint a read-only credential in DynamoDB.** Create a dedicated user or token that can only read. READ_OPERATIONS_ONLY=true makes the server match every command against AWS's read-only action list before it runs.
2. **Add it in the Triagic portal.** Integrations, then Add shared data source, then DynamoDB. Fill in: AWS access key ID (required); AWS secret access key (required); Profile name (required): A profile in the `~/.aws/config` of the machine running Triagic: the name inside `[profile …]`. It is that machine's file, not the portal host's.; Region (required)
3. **Let a desktop pick it up.** Saving validates the shape of what you typed. The first desktop app to sync starts DynamoDB locally and reports running or degraded with the error text.

Setup reference: https://triagic.com/docs/integrations/databases#dynamodb

## Read-only, by construction

READ_OPERATIONS_ONLY=true makes the server match every command against AWS's read-only action list before it runs.

## FAQ

**Can Triagic change anything in DynamoDB?**
No. READ_OPERATIONS_ONLY=true makes the server match every command against AWS's read-only action list before it runs. Give it a read-only credential as well, so the guarantee does not rest on one layer.

**What do I need to connect DynamoDB?**
AWS access key ID, AWS secret access key, Profile name, Region. The desktop app on a member's machine starts the connection; the portal never holds a live process.

**Does DynamoDB cost extra?**
No. Every connector is included in the seat price. Start a 14-day trial without a card.

## Related integrations

- [MongoDB](https://triagic.com/integrations/mongodb)
- [PostgreSQL](https://triagic.com/integrations/postgres)
- [MySQL](https://triagic.com/integrations/mysql)
- [Redis](https://triagic.com/integrations/redis)