I've just had a look at that DynamoSessionItem by (new String(sessionItem.sessionData.array())) in debugger. It shows that session data already contains model with stacktrace for NotSerializableException . I think such behavior should be changed. As long as you've managed to add such a session into DynamoDB - you're done until it expires or manually cleaned.