The client app (web app using client-side javascript) accessing directly to AWS DynamoDB ( using aws-sdk) and DynamoDB accessibility is authenticated by AWS Cognito. All the user must login with AWS Cognito to access AWS DynamoDB.
For the above serverless (client javascript application - accessing from browser), what are the security vulnerabilities for the above application architecture ?