dynamodb

78 actions in the dynamodb service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

dynamodb:AssociateTableReplica

Write

Grants permission to create multi account global table replica

dynamodb:BatchGetItem

Read

Grants permission to return the attributes of one or more items from one or more tables

dynamodb:BatchWriteItem

Write

Grants permission to put or delete multiple items in one or more tables

dynamodb:ConditionCheckItem

Read

Grants permission to the ConditionCheckItem operation checks the existence of a set of attributes for the item with the given primary key

dynamodb:CreateBackup

Write

Grants permission to create a backup for an existing table

dynamodb:CreateGlobalTable

Write

Grants permission to create a global table from an existing table

dynamodb:CreateGlobalTableWitness

Write

Grants permission to add a Witness to a Global Table

dynamodb:CreateTable

Write

Grants permission to the CreateTable operation adds a new table to your account

dynamodb:CreateTableReplica

Write

Grants permission to add a new replica table

dynamodb:DeleteBackup

Write

Grants permission to delete an existing backup of a table

dynamodb:DeleteGlobalTableWitness

Write

Grants permission to remove a Witness from a Global Table

dynamodb:DeleteItem

Write

Grants permission to deletes a single item in a table by primary key

dynamodb:DeleteResourcePolicy

Permissions management

Grants permission to delete the resource-based policy attached to the resource

dynamodb:DeleteTable

Write

Grants permission to the DeleteTable operation which deletes a table and all of its items

dynamodb:DeleteTableReplica

Write

Grants permission to delete a replica table and all of its items

dynamodb:DescribeBackup

Read

Grants permission to describe an existing backup of a table

dynamodb:DescribeContinuousBackups

Read

Grants permission to check the status of the backup restore settings on the specified table

dynamodb:DescribeContributorInsights

Read

Grants permission to describe the contributor insights status and related details for a given table or global secondary index

dynamodb:DescribeEndpoints

Read

Grants permission to return the regional endpoint information

dynamodb:DescribeExport

Read

Grants permission to describe an existing Export of a table

dynamodb:DescribeGlobalTable

Read

Grants permission to return information about the specified global table

dynamodb:DescribeGlobalTableSettings

Read

Grants permission to return settings information about the specified global table

dynamodb:DescribeImport

Read

Grants permission to describe an existing import

dynamodb:DescribeKinesisStreamingDestination

Read

Grants permission to grant permission to describe the status of Kinesis streaming and related details for a given table

dynamodb:DescribeLimits

Read

Grants permission to return the current provisioned-capacity limits for your AWS account in a region, both for the region as a whole and for any one DynamoDB table that you create there

dynamodb:DescribeReservedCapacity

Read

Grants permission to describe one or more of the Reserved Capacity purchased

dynamodb:DescribeReservedCapacityOfferings

Read

Grants permission to describe Reserved Capacity offerings that are available for purchase

dynamodb:DescribeStream

Read

Grants permission to return information about a stream, including the current status of the stream, its Amazon Resource Name (ARN), the composition of its shards, and its corresponding DynamoDB table

dynamodb:DescribeTable

Read

Grants permission to return information about the table

dynamodb:DescribeTableReplicaAutoScaling

Read

Grants permission to describe the auto scaling settings across all replicas of the global table

dynamodb:DescribeTimeToLive

Read

Grants permission to give a description of the Time to Live (TTL) status on the specified table

dynamodb:DisableKinesisStreamingDestination

Write

Grants permission to grant permission to stop replication from the DynamoDB table to the Kinesis data stream

dynamodb:EnableKinesisStreamingDestination

Write

Grants permission to grant permission to start table data replication to the specified Kinesis data stream at a timestamp chosen during the enable workflow

dynamodb:ExportTableToPointInTime

Write

Grants permission to initiate an Export of a DynamoDB table to S3

dynamodb:GetAbacStatus

Read

Grants permission to view the status of Attribute Based Access Control for the account

dynamodb:GetItem

Read

Grants permission to the GetItem operation that returns a set of attributes for the item with the given primary key

dynamodb:GetRecords

Read

Grants permission to retrieve the stream records from a given shard

dynamodb:GetResourcePolicy

Read

Grants permission to view a resource-based policy for a resource

dynamodb:GetShardIterator

Read

Grants permission to return a shard iterator

dynamodb:ImportTable

Write

Grants permission to initiate an import from S3 to a DynamoDB table

dynamodb:InjectError

Write

Grants permission to start experiments on a Global Table

dynamodb:ListBackups

List

Grants permission to list backups associated with the account and endpoint

dynamodb:ListContributorInsights

List

Grants permission to list the ContributorInsightsSummary for all tables and global secondary indexes associated with the current account and endpoint

dynamodb:ListExports

List

Grants permission to list exports associated with the account and endpoint

dynamodb:ListGlobalTables

List

Grants permission to list all global tables that have a replica in the specified region

dynamodb:ListImports

List

Grants permission to list imports associated with the account and endpoint

dynamodb:ListStreams

Read

Grants permission to return an array of stream ARNs associated with the current account and endpoint

dynamodb:ListTables

List

Grants permission to return an array of table names associated with the current account and endpoint

dynamodb:ListTagsOfResource

Read

Grants permission to list all tags on an Amazon DynamoDB resource

dynamodb:PartiQLDelete

Write

Grants permission to delete a single item in a table by primary key

dynamodb:PartiQLInsert

Write

Grants permission to create a new item, if an item with same primary key does not exist in the table

dynamodb:PartiQLSelect

Read

Grants permission to read a set of attributes for items from a table or index

dynamodb:PartiQLUpdate

Write

Grants permission to edit an existing item's attributes

dynamodb:PurchaseReservedCapacityOfferings

Write

Grants permission to purchases reserved capacity for use with your account

dynamodb:PutItem

Write

Grants permission to create a new item, or replace an old item with a new item

dynamodb:PutResourcePolicy

Permissions management

Grants permission to attach a resource-based policy to the resource

dynamodb:Query

Read

Grants permission to use the primary key of a table or a secondary index to directly access items from that table or index

dynamodb:ReadDataForReplication

Read

Grants permission to read data from a multi account global table replica

dynamodb:ReplicateSettings

Write

Grants permission to configure settings for a multi account global table replica

dynamodb:RestoreTableFromAwsBackup

Write

Grants permission to create a new table from recovery point on AWS Backup

dynamodb:RestoreTableFromBackup

Write

Grants permission to create a new table from an existing backup

dynamodb:RestoreTableToPointInTime

Write

Grants permission to restore a table to a point in time

dynamodb:Scan

Read

Grants permission to return one or more items and item attributes by accessing every item in a table or a secondary index

dynamodb:StartAwsBackupJob

Write

Grants permission to create a backup on AWS Backup with advanced features enabled

dynamodb:TagResource

Tagging

Grants permission to associate a set of tags with an Amazon DynamoDB resource

dynamodb:UntagResource

Tagging

Grants permission to remove the association of tags from an Amazon DynamoDB resource

dynamodb:UpdateAbacStatus

Permissions management

Grants permission to update the status of Attribute Based Access Control for the account

dynamodb:UpdateContinuousBackups

Write

Grants permission to enable or disable continuous backups

dynamodb:UpdateContributorInsights

Write

Grants permission to update the status for contributor insights for a specific table or global secondary index

dynamodb:UpdateGlobalTable

Write

Grants permission to add or remove replicas in the specified global table

dynamodb:UpdateGlobalTableSettings

Write

Grants permission to update settings of the specified global table

dynamodb:UpdateGlobalTableVersion

Write

Grants permission to update version of the specified global table

dynamodb:UpdateItem

Write

Grants permission to edit an existing item's attributes, or adds a new item to the table if it does not already exist

dynamodb:UpdateKinesisStreamingDestination

Write

Grants permission to update data replication configurations for the specified Kinesis data stream

dynamodb:UpdateTable

Write

Grants permission to modify the provisioned throughput settings, global secondary indexes, or DynamoDB Streams settings for a given table

dynamodb:UpdateTableReplicaAutoScaling

Write

Grants permission to update auto scaling settings on your replica table

dynamodb:UpdateTimeToLive

Write

Grants permission to enable or disable TTL for the specified table

dynamodb:WriteDataForReplication

Write

Grants permission to write data to a multi account global table replica