---
schema_version: "1"
id: 2bd5b97b948ae0540378da2e9c6a27813eec15229eda874384c59a2222841d90
title: Define a Named Credential for Salesforce Connect Adapter for Amazon DynamoDB
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/dynamodb_named_credentials_external_credentials.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.dynamodb_named_credentials_external_credentials.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: b9344c42595b7dd3279cf1f7181af0e7ca105bde99bd374d69088309007ac6b1
description: Create a named credential that specifies the endpoint URL for Amazon DynamoDB and an external credential to provide the required authentication parameters.
products:
  - Salesforce Platform
  - Security
release: "264"
---
# Define a Named Credential for Salesforce Connect Adapter for Amazon DynamoDB

Create a named credential that specifies the endpoint URL for Amazon DynamoDB and an external credential to provide the required authentication parameters.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d78776e63">User Permissions
              Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e63 ">To view named credentials:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e63 ">View Setup and Configuration</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e63 ">To create, edit, or delete named credentials:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e63 ">Customize Applications</td>

          </tr>
        </tbody>
      </table>

1. From Setup, enter Named Credentials in the Quick Find box, then select **Named Credentials**.
2. Click **External Credentials**.
3. To create a new external credential, click **New** . To edit an existing external credential, click its link in the list of external credentials and then click **Edit**.
4. Complete the fields.
    
     
    | Field | Description |
    | --- | --- |
    | Label | A user-friendly name for the named credential that’s displayed in the Salesforce user interface. |
    | Name | A unique identifier that’s used to refer to this external credential from callout definitions while creating an external data source for Amazon DynamoDB. |
    | Authentication Protocol | Select **AWS Signature Version 4**. |
    | Service | The name of an AWS service, such as _dynamodb_. |
    | Region | The AWS region for the named credential’s endpoint. For example, us-west-2. |
    | AWS Account ID | Optional. The 12-digit number that uniquely identifies your AWS account. |
    | Use STS for Temporary Access | Select the checkbox to provide limited access and specify STS access key, access secret, external ID, and duration. For details, see [Create and Edit an External Credential](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_awssig4_ext_cred.htm&type=5&language=en_US). |
5. Click **Save**. You’re taken to the Named Credentials screen.
6. To further edit the new external credential, click **External Credential**.
7. Select the external credential you created.
8. Scroll to Permission Set Mappings.
9. Click **New** to create a permission set mapping for this external credential.
10. Complete the following fields. When you use STS for temporary access, the Access Key and Secret fields are disabled and display the temporary credentials, if any.
    
    <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
            <colgroup>
              <col style="width:25%">
              <col style="width:75%">
            </colgroup>
            <thead class="slds-text-title_caps ">
              <tr class="">
                <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d78776e318">Field</th>
                <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d78776e321">Description</th>
              </tr>
            </thead>
            <tbody>
              <tr class="">
                <td data-label="Field" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e318 ">
                  <samp class="parmname">Permission Set</samp>
                </td>

                <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e321 ">
                  <p>Select an available permission set. This enables different groups of
                    Salesforce users to mirror access permissions of IAM roles.</p>
                  <p style="margin-bottom:0;">Make sure you
                    define the required access to the User External Credentials object (use
                    permission sets or profiles to configure object access). Only users with
                    access to the User External Credentials object can make callouts to the
                    external source. For details, see <a href="https://help.salesforce.com/s/articleView?id=xcloud.nc_named_creds_and_ext_creds.htm&amp;type=5&amp;language=en_US" target="_blank">Named Credentials and External
                      Credentials</a>.</p>
                </td>

              </tr>
              <tr class="">
                <td data-label="Field" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e318 ">
                  <samp class="parmname">Sequence Number</samp>
                </td>

                <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e321 ">Assign a sequence number. A sequence number specifies the order of
                  principals to apply when a user participates in more than one principal. For
                  example, a user could be part of multiple permission sets that are applicable
                  for a credential provider. Priority is from lower to higher numbers. </td>

              </tr>
              <tr class="">
                <td data-label="Field" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e318 ">
                  <samp class="parmname">IAM Role ARN</samp>
                </td>

                <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d78776e321 ">
                  <p>The Amazon Resource Name (ARN) of the role that the credential
                    assumes.</p>
                  <p>To get the ARN for an IAM role:</p>
                  <ol>
                    <li>In the navigation pane of the IAM console, choose Roles.</li>
                    <li>In the list of roles, choose the role you want to map to the permission
                      set.</li>
                    <li>In the Summary section, copy the ARN value.</li>
                  </ol>
                  <p style="margin-bottom:0;"> For details, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html" target="_blank"><em>AWS Identity and Access Management User
                        Guide</em>: Tutorials</a>.</p>
                </td>

              </tr>
            </tbody>
          </table>
11. Create a named credential that uses the authentication configuration you defined in the external credential. From Setup, enter Named Credentials in the Quick Find box, select **Named Credentials**, and then click **Named Credentials**.
12. To create a new named credential, click **New** and complete the fields.
    - Fill out the Label, Name, and URL fields.
        
        Sample format for the URL would be `https://dynamodb._REGION_.amazonaws.com` For example, if the AWS region is us-west-2, the URL would be `https://dynamodb.us-west-2.amazonaws.com`
        
        For details, see [Create and Edit a Named Credential](https://help.salesforce.com/s/articleView?id=xcloud.nc_create_edit_named_credential.htm&type=5&language=en_US).
    - For the External Credential field, select the external credential you created that uses the AWS Signature Version 4 authentication protocol.
    - Select Generate Authorization Header.

Use the named credential that captures the authentication configuration in external credentials to authenticate Salesforce users against Amazon DynamoDB, provide limited access to AWS resources, and periodically refresh access tokens.

#### See Also

- [_Amazon DynamoDB Developer Guide_: Getting an AWS Access Key](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/SettingUp.DynamoWebService.html#)
- [Named Credentials](https://help.salesforce.com/s/articleView?id=xcloud.named_credentials_about.htm&type=5&language=en_US)
- [Salesforce Connect Adapter for Amazon DynamoDB](https://help.salesforce.com/s/articleView?id=platform.dynamodb_adapter_about.htm&release=264.0.0&type=5 "Connect to Amazon DynamoDB to access and integrate DynamoDB data into Salesforce applications. With this adapter, take advantage of the flexible data storage capabilities of Amazon DynamoDB that provides fast and predictable performance combined with customer 360-degree view captured in Salesforce.")