Amazon DynamoDB Events

Ingest Amazon DynamoDB management and data events — API calls, table operations, and item-level activity — into Bronto through CloudTrail and EventBridge.

Amazon DynamoDB doesn’t emit logs of its own — instead, table operations, control-plane API calls, and (when enabled) item-level data events are recorded in AWS CloudTrail.

DynamoDB Streams is a separate, application-facing change-data-capture feature for items in a table. This page covers operational and audit-event ingestion via CloudTrail; DynamoDB Streams is out of scope here.

​

Recommended method

EventBridge API Destinations — a CloudTrail-driven EventBridge rule delivers DynamoDB events to Bronto in real time over HTTPS, with no intermediate storage. Use this event pattern:

{
  "source": ["aws.dynamodb"],
  "detail-type": ["AWS API Call via CloudTrail"]
}

• An active CloudTrail trail is required.
• Item-level data events (GetItem, PutItem, Query, …) reach EventBridge only if the trail is configured to log DynamoDB data events.
• Read-only control-plane calls (DescribeTable, ListTables, …) only match rules whose state is ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS. A rule in the default ENABLED state receives write events and data events only.

​

Alternatives

• CloudWatch Log Forwarder — when CloudTrail is configured to publish to a CloudWatch Log Group.

See Ingesting AWS Data into Bronto for the full service-to-method mapping.

​

References

• Amazon DynamoDB — logging API calls with CloudTrail
• Amazon EventBridge — AWS service events delivered via CloudTrail