IAM / database / dynamodb

AWS DynamoDB (IAM)

JSON →
AWSdynamodbdatabase

Amazon DynamoDB is a fully managed NoSQL database service for high-performance applications at any scale.

iamaws
docs ↗
Permissions
Actions in this service
dynamodb:GetItem
dynamodb:PutItem
dynamodb:DeleteItem
dynamodb:UpdateItem
dynamodb:ListTables
dynamodb:DescribeTable
dynamodb:CreateTable
dynamodb:DeleteTable
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "dynamodb:GetItem", "dynamodb:PutItem", "dynamodb:DeleteItem", "dynamodb:UpdateItem", "dynamodb:ListTables", "dynamodb:DescribeTable", "dynamodb:CreateTable", "dynamodb:DeleteTable" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid dynamodb:* — grants full control including deletion of tables and backups.
Avoid dynamodb:PutItem without conditions — can overwrite or create items unexpectedly.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/dynamodb/dynamodb.json ↗