Update DynamoDB permissions

List/Remove tags Manage backups
mattclay · Sep 20, 2021 · 56aa212 · 56aa212
1 parent d200871
commit 56aa212
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/aws/policy/data-services.yaml b/aws/policy/data-services.yaml
@@ -26,14 +26,19 @@ Statement:
       - dms:ModifyEndpoint
       - dms:DeleteReplicationSubnetGroup
       - dms:ModifyReplicationSubnetGroup
-      - dynamodb:GetItem
+      - dynamodb:CreateTable
       - dynamodb:DeleteItem
+      - dynamodb:DeleteTable
+      - dynamodb:DescribeContinuousBackups
+      - dynamodb:GetItem
+      - dynamodb:ListTables
+      - dynamodb:ListTagsOfResource
       - dynamodb:PutItem
+      - dynamodb:TagResource
+      - dynamodb:UntagResource
+      - dynamodb:UpdateContinuousBackups
       - dynamodb:UpdateItem
-      - dynamodb:CreateTable
-      - dynamodb:DeleteTable
       - dynamodb:UpdateTable
-      - dynamodb:TagResource
       - elasticache:AddTagsToResource
       - elasticache:CreateCacheSecurityGroup
       - elasticache:CreateCacheSubnetGroup