DynamoDB
Prefix dynamodb, 85 actions · Domain Databases
19 AWS managed policies. 7 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
User access (7)
- AmazonDynamoDBFullAccessHigh privilegeAdmin
- AmazonDynamoDBFullAccess_v2High privilegeAdmin
- AmazonDynamoDBFullAccesswithDataPipelineHigh privilegeAdmin
- AmazonDynamoDBReadOnlyAccessReader
- AWSLambdaFullAccessHigh privilegeAdmin
- DatabaseAdministratorHigh privilegeAdmin
- DataScientistHigh privilegeAdmin
Operator and limited (4)
Service roles (5)
- AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin
- AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin
- AWSElasticBeanstalkRoleWorkerTierOperator
- AWSIoTRuleActionsHigh privilegeOperator
- AWSLambdaDynamoDBExecutionRoleOperator
Service-linked roles (3)
- AWSApplicationAutoscalingDynamoDBTablePolicyOperator
- DynamoDBReplicationServiceRolePolicyHigh privilegeOperator
- Route53RecoveryReadinessServiceRolePolicyOperator
Also grants DynamoDB actions (62)
- AccessAnalyzerServiceRolePolicy
- AdministratorAccess
- AdministratorAccess-Amplify
- AdministratorAccess-AWSElasticBeanstalk
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDevOpsGuruServiceRolePolicy
- AmazonEC2RolePolicyForLaunchWizard
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonRedshiftAllCommandsFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSBackupServiceLinkedRolePolicyForBackup
- AWSBackupServiceRolePolicyForBackup
- AWSBackupServiceRolePolicyForRestores
- AWSCloudTrail_FullAccess
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSDataPipeline_FullAccess
- AWSDataPipeline_PowerUser
- AWSElasticBeanstalkWorkerTier
- AWSFinOpsAgentServiceRolePolicy
- AWSGlueConsoleFullAccess
- AWSGlueConsoleSageMakerNotebookFullAccess
- AWSMcpServiceActionsFullAccess
- AWSMobileHub_FullAccess
- AWSMobileHub_ReadOnly
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSServiceRolePolicyForBackupRestoreTesting
- AWSSupportServiceRolePolicy
- AWSThinkboxAWSPortalAdminPolicy
- AWSTrustedAdvisorServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchOmniAWSIntegrationPolicy
- ComputeOptimizerServiceRolePolicy
- ConsoleFullAccessFromVercel
- ConsoleViewOnlyAccessFromVercel
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- SageMakerStudioProjectUserRolePolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecurityAudit
- ServiceQuotasFullAccess
- ServiceQuotasReadOnlyAccess
- SupportUser
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
associatetablereplica batchgetitem batchwriteitem bulkputitems cancelbulkoperation conditioncheckitem createbackup createglobaltable createglobaltablewitness createtable createtablereplica deletebackup deleteglobaltablewitness deleteitem deleteresourcepolicy deletetable deletetablereplica describebackup describebulkoperation describecontinuousbackups describecontributorinsights describeendpoints describeexport describeglobaltable describeglobaltablesettings describeimport describekinesisstreamingdestination describelimits describereservedcapacity describereservedcapacityofferings describestream describetable describetablereplicaautoscaling describetimetolive disablekinesisstreamingdestination disassociatetablereplica enablekinesisstreamingdestination exporttabletopointintime getabacstatus getitem getrecords getresourcepolicy getsharditerator importtable injecterror listbackups listbulkoperations listcontributorinsights listexports listglobaltables listimports liststreams listtables listtagsofresource partiqldelete partiqlinsert partiqlselect partiqlupdate purchasereservedcapacityofferings putitem putresourcepolicy query readdataforreplication replicatesettings restoretablefromawsbackup restoretablefrombackup restoretabletopointintime scan searchvectors startawsbackupjob startbulkoperation tagresource untagresource updateabacstatus updatecontinuousbackups updatecontributorinsights updateglobaltable updateglobaltablesettings updateglobaltableversion updateitem updatekinesisstreamingdestination updatetable updatetablereplicaautoscaling updatetimetolive writedataforreplication
Actions (85)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| dynamodb:AssociateTableReplica | Write | 12 | 1 |
| dynamodb:BatchGetItem | Read | 15 | 3 |
| dynamodb:BatchWriteItem | Write | 13 | 5 |
| dynamodb:BulkPutItems | Write | 12 | 1 |
| dynamodb:CancelBulkOperation | Write | 12 | 1 |
| dynamodb:ConditionCheckItem | Read | 13 | 1 |
| dynamodb:CreateBackup | Write | 12 | 2 |
| dynamodb:CreateGlobalTable | Write | 12 | 1 |
| dynamodb:CreateGlobalTableWitness | Write | 12 | 1 |
| dynamodb:CreateTable | Write | 12 | 8 |
| dynamodb:CreateTableReplica | Write | 12 | 1 |
| dynamodb:DeleteBackup | Write | 12 | 4 |
| dynamodb:DeleteGlobalTableWitness | Write | 12 | 1 |
| dynamodb:DeleteItem | Write | 14 | 5 |
| dynamodb:DeleteResourcePolicy | Permissions management | 12 | 1 |
| dynamodb:DeleteTable | Write | 12 | 9 |
| dynamodb:DeleteTableReplica | Write | 12 | 1 |
| dynamodb:DescribeBackup | Read | 27 | 4 |
| dynamodb:DescribeBulkOperation | Read | 22 | 1 |
| dynamodb:DescribeContinuousBackups | Read | 33 | 4 |
| dynamodb:DescribeContributorInsights | Read | 30 | 3 |
| dynamodb:DescribeEndpoints | Read | 24 | 2 |
| dynamodb:DescribeExport | Read | 25 | 2 |
| dynamodb:DescribeGlobalTable | Read | 29 | 2 |
| dynamodb:DescribeGlobalTableSettings | Read | 28 | 2 |
| dynamodb:DescribeImport | Read | 25 | 2 |
| dynamodb:DescribeKinesisStreamingDestination | Read | 29 | 3 |
| dynamodb:DescribeLimits | Read | 38 | 2 |
| dynamodb:DescribeReservedCapacity | Read | 24 | 3 |
| dynamodb:DescribeReservedCapacityOfferings | Read | 24 | 3 |
| dynamodb:DescribeStream | Read | 30 | 3 |
| dynamodb:DescribeTable | Read | 47 | 16 |
| dynamodb:DescribeTableReplicaAutoScaling | Read | 29 | 2 |
| dynamodb:DescribeTimeToLive | Read | 33 | 5 |
| dynamodb:DisableKinesisStreamingDestination | Write | 12 | 1 |
| dynamodb:DisassociateTableReplica | Write | 12 | 1 |
| dynamodb:EnableKinesisStreamingDestination | Write | 12 | 1 |
| dynamodb:ExportTableToPointInTime | Write | 12 | 1 |
| dynamodb:GetAbacStatus | Read | 16 | 1 |
| dynamodb:GetItem | Read | 16 | 5 |
| dynamodb:GetRecords | Read | 17 | 2 |
| dynamodb:GetResourcePolicy | Read | 27 | 3 |
| dynamodb:GetShardIterator | Read | 16 | 2 |
| dynamodb:ImportTable | Write | 12 | 1 |
| dynamodb:InjectError | Write | 12 | 1 |
| dynamodb:ListBackups | List | 29 | 2 |
| dynamodb:ListBulkOperations | List | 22 | 1 |
| dynamodb:ListContributorInsights | List | 25 | 1 |
| dynamodb:ListExports | List | 25 | 1 |
| dynamodb:ListGlobalTables | List | 29 | 1 |
| dynamodb:ListImports | List | 25 | 1 |
| dynamodb:ListStreams | Read | 31 | 2 |
| dynamodb:ListTables | List | 50 | 3 |
| dynamodb:ListTagsOfResource | Read | 32 | 7 |
| dynamodb:PartiQLDelete | Write | 12 | 1 |
| dynamodb:PartiQLInsert | Write | 12 | 1 |
| dynamodb:PartiQLSelect | Read | 18 | 1 |
| dynamodb:PartiQLUpdate | Write | 12 | 1 |
| dynamodb:PurchaseReservedCapacityOfferings | Write | 12 | 1 |
| dynamodb:PutItem | Write | 15 | 6 |
| dynamodb:PutResourcePolicy | Permissions management | 12 | 1 |
| dynamodb:Query | Read | 19 | 4 |
| dynamodb:ReadDataForReplication | Read | 13 | 1 |
| dynamodb:ReplicateSettings | Write | 12 | 1 |
| dynamodb:RestoreTableFromAwsBackup | Write | 12 | 2 |
| dynamodb:RestoreTableFromBackup | Write | 12 | 2 |
| dynamodb:RestoreTableToPointInTime | Write | 12 | 1 |
| dynamodb:Scan | Read | 20 | 9 |
| dynamodb:SearchVectors | Read | 13 | 1 |
| dynamodb:StartAwsBackupJob | Write | 12 | 2 |
| dynamodb:StartBulkOperation | Write | 12 | 1 |
| dynamodb:TagResource | Tagging | 14 | 6 |
| dynamodb:UntagResource | Tagging | 14 | 4 |
| dynamodb:UpdateAbacStatus | Permissions management | 12 | 1 |
| dynamodb:UpdateContinuousBackups | Write | 12 | 2 |
| dynamodb:UpdateContributorInsights | Write | 12 | 1 |
| dynamodb:UpdateGlobalTable | Write | 12 | 1 |
| dynamodb:UpdateGlobalTableSettings | Write | 12 | 1 |
| dynamodb:UpdateGlobalTableVersion | Write | 12 | 1 |
| dynamodb:UpdateItem | Write | 14 | 6 |
| dynamodb:UpdateKinesisStreamingDestination | Write | 12 | 1 |
| dynamodb:UpdateTable | Write | 15 | 4 |
| dynamodb:UpdateTableReplicaAutoScaling | Write | 12 | 1 |
| dynamodb:UpdateTimeToLive | Write | 14 | 2 |
| dynamodb:WriteDataForReplication | Write | 12 | 1 |