The only downside of credstash is that it doesn't have the ability to restrict sets of credentials to different IAM roles. The access is all-or-nothing, per dynamo table.
Otherwise the general design of credstash is very similar to Confidant.
It is possible to use fine grained access control with dynamodb in order to restrict access within a ddb table