| allow-table-scans | boolean | optional | false | Allow use of table scans to fulfill resource queries |
| api-call-attempt-timeout | int64 | optional | | Amount of time in seconds to wait for each individual request to complete. If not set, DynamoDB’s default is used. |
| api-call-timeout | int64 | optional | | Amount of time in seconds to wait for the execution of an API call to complete, including retries. If not set, DynamoDB’s default is used. |
| aws-region | enumeration | required | | The AWS Region where DynamoDB is deployed. |
| delegation-attributes-from-claims | multi-value, string | optional | | Optional list with the delegation ‘claims’ properties that should also be used as top-level delegation table attributes |
| delegation-attributes-from-custom-claim-values | multi-value, string | optional | | Optional list with the delegation ‘customClaimValues’ properties that should also be used as top-level delegation table attributes |
| delegations-ttl-retain-duration | int64 | optional | 31536000 | Delegations additional retain duration (in seconds) |
| devices-ttl-retain-duration | int64 | optional | 2592000 | Devices additional retain duration (in seconds) |
| endpoint-override | string | optional | | Override the endpoint used to connect to DynamoDB. Useful for testing. |
| nonces-ttl-retain-duration | int64 | optional | 86400 | Nonces additional retain duration (in seconds) |
| sessions-ttl-retain-duration | int64 | optional | 86400 | Sessions additional retain duration (in seconds) |
| table-name-prefix | string | optional | | Table name prefix. If defined, all the DynamoDB tables used by this plugin will have this string prefixed into the name |
| tokens-ttl-retain-duration | int64 | optional | 172800 | Tokens additional retain duration (in seconds) |