DynamoDB - Permissions API

DynamoDB - Permissions API

The DynamoDB API offers a large set of actions that require permissions. When setting up permissions, you must set the allowed actions, the allowed resources, and the conditions for each.

You can specify actions in the Policy Action field. Specify a resource value in the Resource field of the policy. But make sure you are using the correct syntax prefixing Dynamodb:: with the API operation.

For example - Dynamodb: CreateTable

You can also use conditional keys to filter permissions.

Permissions and API Actions

Take a close look at the API actions and associated permissions listed in the following table:

API operation Required permission
BatchGetItem dynamodb:BatchGetItem
BatchWriteItem dynamodb:BatchWriteItem
CreateTable dynamodb: CreateTable
Delete item dynamodb: DeleteItem
DeleteTable dynamodb: DeleteTable
DescribeLimits dynamodb: DescribeLimits
DescribeReservedCapacity dynamodb: DescribeReservedCapacity
DescribeReservedCapacityOfferings dynamodb: DescribeReservedCapacityOfferings
DescribeStream dynamodb: DescribeStream
DescribeTable dynamodb: DescribeTable
GetItem dynamodb: GetItem
GetRecords dynamodb: GetRecords
GetShardIterator dynamodb: GetShardIterator
ListStreams dynamodb: ListStreams
ListTables dynamodb: ListTables
PurchaseReservedCapacityOfferings dynamodb:PurchaseReservedCapacityOfferings
PutItem dynamodb: PutItem
inquiry dynamodb: Request
scanning dynamodb: Scan
UpdateItem dynamodb: UpdateItem
update table dynamodb: UpdateTable

Resources

In the following table, you can view the resources associated with each allowed API action −

arn: aws: dynamodb: region: account-id: table-name of table/

or

account-id:: // index table-name / index-table-name ARN: AWS: dynamodb: region

arn: aws: dynamodb: region: account-id: table-name of table/

or

account-id:: // index table-name / index-table-name ARN: AWS: dynamodb: region