Your mobile application requires the execution of API calls to DynamoDB. However, you want to avoid storing AWS secret and access keys directly on the mobile devices. Additionally, it is essential that each mobile device makes calls to DynamoDB using a unique identity.

Which of the following AWS services allows you to achieve this?