enforce checks per dynamodb specs