Encrypted DynamoDB Cursors

Encrypt dynamodb last evaluated key cursors before sending them to clients.
Decrypt cursors that clients sent you and continue paginating.

That's it.