sdb:DomainMetadata is a Read access-level action in the sdb service. Grants permission to return information about the domain, including when the domain was created, the number of items and attributes, and the size of attribute names and values
ARNs that sdb:DomainMetadata can be scoped to in an IAM policy.
No condition keys are documented for this action.
A minimal policy that allows sdb:DomainMetadata. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSdbDomainMetadata",
"Effect": "Allow",
"Action": "sdb:DomainMetadata",
"Resource": "*"
}
]
}