federated auth -> dynamoDB