dynamodb.yml

Actions:
  - Name: dynamodb:BatchGetItem
  - Name: dynamodb:BatchWriteItem
  - Name: dynamodb:CreateBackup
  - Name: dynamodb:CreateGlobalTable
  - Name: dynamodb:CreateTable
  - Name: dynamodb:DeleteBackup
  - Name: dynamodb:DeleteItem
  - Name: dynamodb:DeleteTable
  - Name: dynamodb:DescribeBackup
  - Name: dynamodb:DescribeContinuousBackups
  - Name: dynamodb:DescribeContributorInsights
  - Name: dynamodb:DescribeGlobalTable
  - Name: dynamodb:DescribeGlobalTableSettings
  - Name: dynamodb:DescribeLimits
  - Name: dynamodb:DescribeStream
  - Name: dynamodb:DescribeTable
  - Name: dynamodb:DescribeTableReplicaAutoScaling
  - Name: dynamodb:DescribeTimeToLive
  - Name: dynamodb:GetItem
  - Name: dynamodb:GetRecords
  - Name: dynamodb:GetShardIterator
  - Name: dynamodb:ListBackups
  - Name: dynamodb:ListContributorInsights
  - Name: dynamodb:ListGlobalTables
  - Name: dynamodb:ListStreams
  - Name: dynamodb:ListTables
  - Name: dynamodb:ListTagsOfResource
  - Name: dynamodb:PutItem
  - Name: dynamodb:Query
  - Name: dynamodb:RestoreTableFromBackup
  - Name: dynamodb:RestoreTableToPointInTime
  - Name: dynamodb:Scan
  - Name: dynamodb:TagResource
  - Name: dynamodb:UntagResource
  - Name: dynamodb:UpdateContinuousBackups
  - Name: dynamodb:UpdateContributorInsights
  - Name: dynamodb:UpdateGlobalTable
  - Name: dynamodb:UpdateGlobalTableSettings
  - Name: dynamodb:UpdateItem
  - Name: dynamodb:UpdateTable
  - Name: dynamodb:UpdateTableReplicaAutoScaling
  - Name: dynamodb:UpdateTimeToLive

  # actions with no corresponding API
  - Name: dynamodb:ConditionCheckItem
  - Name: dynamodb:CreateTableReplica
  - Name: dynamodb:DeleteTableReplica
  - Name: dynamodb:DescribeReservedCapacity
  - Name: dynamodb:DescribeReservedCapacityOfferings
  - Name: dynamodb:PurchaseReservedCapacityOfferings

  # APIs without an IAM action
  - Name: dynamodb:DescribeEndpoints
  - Name: dynamodb:TransactGetItems
  - Name: dynamodb:TransactWriteItems