Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon DynamoDB

Amazon DynamoDB (service prefix: dynamodb) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon DynamoDB
Actions defined by Amazon DynamoDB
Permission-only actions for Amazon DynamoDB
Resource types defined by Amazon DynamoDB
Condition keys for Amazon DynamoDB

API operations defined by Amazon DynamoDB

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Access level
BatchExecuteStatement	dynamodb	dynamodb:PartiQLDelete	Write
		dynamodb:PartiQLInsert	Write
		dynamodb:PartiQLSelect	Read
		dynamodb:PartiQLUpdate	Write
BatchGetItem	dynamodb	dynamodb:BatchGetItem	Read
BatchWriteItem	dynamodb	dynamodb:BatchWriteItem	Write
CreateBackup	dynamodb	dynamodb:CreateBackup	Write
CreateGlobalTable	dynamodb	dynamodb:CreateGlobalTable	Write
CreateTable	dynamodb	dynamodb:AssociateTableReplica	Write
		dynamodb:BatchWriteItem	Write
		dynamodb:CreateTable	Write
		dynamodb:CreateTableReplica	Write
		dynamodb:DeleteItem	Write
		dynamodb:GetItem	Read
		dynamodb:PutItem	Write
		dynamodb:PutResourcePolicy	Permissions management, Write
		dynamodb:Query	Read
		dynamodb:Scan	Read
		dynamodb:TagResource	Tagging, Write
		dynamodb:UpdateItem	Write
DeleteBackup	dynamodb	dynamodb:DeleteBackup	Write
DeleteItem	dynamodb	dynamodb:DeleteItem	Write
DeleteItem	dynamodb	dynamodb:WriteDataForReplication	Write
DeleteResourcePolicy	dynamodb	dynamodb:DeleteResourcePolicy	Permissions management, Write
DeleteTable	dynamodb	dynamodb:DeleteTable	Write
DescribeBackup	dynamodb	dynamodb:DescribeBackup	Read
DescribeContinuousBackups	dynamodb	dynamodb:DescribeContinuousBackups	Read
DescribeContributorInsights	dynamodb	dynamodb:DescribeContributorInsights	Read
DescribeEndpoints	dynamodb	dynamodb:DescribeEndpoints	Read
DescribeExport	dynamodb	dynamodb:DescribeExport	Read
DescribeGlobalTable	dynamodb	dynamodb:DescribeGlobalTable	Read
DescribeGlobalTableSettings	dynamodb	dynamodb:DescribeGlobalTableSettings	Read
DescribeImport	dynamodb	dynamodb:DescribeImport	Read
DescribeKinesisStreamingDestination	dynamodb	dynamodb:DescribeKinesisStreamingDestination	Read
DescribeLimits	dynamodb	dynamodb:DescribeLimits	Read
DescribeTable	dynamodb	dynamodb:DescribeTable	Read
		dynamodb:ReadDataForReplication	Read
		dynamodb:ReplicateSettings	Write
DescribeTableReplicaAutoScaling	dynamodb	dynamodb:DescribeTableReplicaAutoScaling	Read
DescribeTimeToLive	dynamodb	dynamodb:DescribeTimeToLive	Read
DescribeTimeToLive	dynamodb	dynamodb:ReadDataForReplication	Read
DisableKinesisStreamingDestination	dynamodb	dynamodb:DisableKinesisStreamingDestination	Write
EnableKinesisStreamingDestination	dynamodb	dynamodb:EnableKinesisStreamingDestination	Write
ExecuteStatement	dynamodb	dynamodb:PartiQLDelete	Write
		dynamodb:PartiQLInsert	Write
		dynamodb:PartiQLSelect	Read
		dynamodb:PartiQLUpdate	Write
ExecuteTransaction	dynamodb	dynamodb:PartiQLDelete	Write
		dynamodb:PartiQLInsert	Write
		dynamodb:PartiQLSelect	Read
		dynamodb:PartiQLUpdate	Write
ExportTableToPointInTime	dynamodb	dynamodb:ExportTableToPointInTime	Write
GetItem	dynamodb	dynamodb:GetItem	Read
GetItem	dynamodb	dynamodb:ReadDataForReplication	Read
GetResourcePolicy	dynamodb	dynamodb:GetResourcePolicy	Read
ImportTable	dynamodb	dynamodb:ImportTable	Write
ListBackups	dynamodb	dynamodb:ListBackups	List
ListContributorInsights	dynamodb	dynamodb:ListContributorInsights	List
ListExports	dynamodb	dynamodb:ListExports	List
ListGlobalTables	dynamodb	dynamodb:ListGlobalTables	List
ListImports	dynamodb	dynamodb:ListImports	List
ListTables	dynamodb	dynamodb:ListTables	List
ListTagsOfResource	dynamodb	dynamodb:ListTagsOfResource	Read
PutItem	dynamodb	dynamodb:PutItem	Write
PutItem	dynamodb	dynamodb:WriteDataForReplication	Write
PutResourcePolicy	dynamodb	dynamodb:PutResourcePolicy	Permissions management, Write
Query	dynamodb	dynamodb:Query	Read
RestoreTableFromBackup	dynamodb	dynamodb:BatchWriteItem	Write
		dynamodb:DeleteItem	Write
		dynamodb:GetItem	Read
		dynamodb:PutItem	Write
		dynamodb:Query	Read
		dynamodb:RestoreTableFromBackup	Write
		dynamodb:Scan	Read
		dynamodb:UpdateItem	Write
RestoreTableToPointInTime	dynamodb	dynamodb:AssociateTableReplica	Write
		dynamodb:BatchWriteItem	Write
		dynamodb:CreateTableReplica	Write
		dynamodb:DeleteItem	Write
		dynamodb:GetItem	Read
		dynamodb:PutItem	Write
		dynamodb:Query	Read
		dynamodb:Scan	Read
		dynamodb:UpdateItem	Write
Scan	dynamodb	dynamodb:Scan	Read
TagResource	dynamodb	dynamodb:TagResource	Tagging, Write
TransactGetItems	dynamodb	dynamodb:GetItem	Read
TransactWriteItems	dynamodb	dynamodb:ConditionCheckItem	Read
		dynamodb:DeleteItem	Write
		dynamodb:PutItem	Write
		dynamodb:UpdateItem	Write
UntagResource	dynamodb	dynamodb:UntagResource	Tagging, Write
UpdateContinuousBackups	dynamodb	dynamodb:UpdateContinuousBackups	Write
UpdateContributorInsights	dynamodb	dynamodb:UpdateContributorInsights	Write
UpdateGlobalTable	dynamodb	dynamodb:UpdateGlobalTable	Write
UpdateGlobalTableSettings	dynamodb	dynamodb:UpdateGlobalTableSettings	Write
UpdateItem	dynamodb	dynamodb:UpdateItem	Write
UpdateKinesisStreamingDestination	dynamodb	dynamodb:UpdateKinesisStreamingDestination	Write
UpdateTable	dynamodb	dynamodb:BatchWriteItem	Write
		dynamodb:CreateGlobalTableWitness	Write
		dynamodb:CreateTable	Write
		dynamodb:CreateTableReplica	Write
		dynamodb:DeleteGlobalTableWitness	Write
		dynamodb:DeleteItem	Write
		dynamodb:GetItem	Read
		dynamodb:PutItem	Write
		dynamodb:Query	Read
		dynamodb:ReplicateSettings	Write
		dynamodb:Scan	Read
		dynamodb:TagResource	Tagging, Write
		dynamodb:UpdateItem	Write
		dynamodb:UpdateTable	Write
		dynamodb:WriteDataForReplication	Write
UpdateTableReplicaAutoScaling	dynamodb	dynamodb:UpdateTableReplicaAutoScaling	Write
UpdateTimeToLive	dynamodb	dynamodb:ReplicateSettings	Write
		dynamodb:UpdateTimeToLive	Write
		dynamodb:WriteDataForReplication	Write
DescribeStream	dynamodbstreams	dynamodb:DescribeStream	Read
DescribeStream	dynamodbstreams	dynamodb:ReadDataForReplication	Read
GetRecords	dynamodbstreams	dynamodb:GetRecords	Read
GetRecords	dynamodbstreams	dynamodb:ReadDataForReplication	Read
GetShardIterator	dynamodbstreams	dynamodb:GetShardIterator	Read
GetShardIterator	dynamodbstreams	dynamodb:ReadDataForReplication	Read
ListStreams	dynamodbstreams	dynamodb:ListStreams	Read

Actions defined by Amazon DynamoDB

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
BatchGetItem	Grants permission to return the attributes of one or more items from one or more tables	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:Select	Read
BatchWriteItem	Grants permission to put or delete multiple items in one or more tables	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity	Write
ConditionCheckItem	Grants permission to the ConditionCheckItem operation checks the existence of a set of attributes for the item with the given primary key	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues	Read
CreateBackup	Grants permission to create a backup for an existing table	table*	aws:ResourceTag/${TagKey}	Write
CreateGlobalTable	Grants permission to create a global table from an existing table	global-table*		Write
CreateGlobalTable		table*	aws:ResourceTag/${TagKey}	Write
CreateTable	Grants permission to the CreateTable operation adds a new table to your account	table*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteBackup	Grants permission to delete an existing backup of a table	backup*		Write
DeleteItem	Grants permission to deletes a single item in a table by primary key	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues	Write
DeleteResourcePolicy	Grants permission to delete the resource-based policy attached to the resource	stream*		Permissions management, Write
DeleteResourcePolicy		table*	aws:ResourceTag/${TagKey}	Permissions management, Write
DeleteTable	Grants permission to the DeleteTable operation which deletes a table and all of its items	table*	aws:ResourceTag/${TagKey}	Write
DescribeBackup	Grants permission to describe an existing backup of a table	backup*		Read
DescribeContinuousBackups	Grants permission to check the status of the backup restore settings on the specified table	table*	aws:ResourceTag/${TagKey}	Read
DescribeContributorInsights	Grants permission to describe the contributor insights status and related details for a given table or global secondary index	index	aws:ResourceTag/${TagKey}	Read
DescribeContributorInsights		table*	aws:ResourceTag/${TagKey}	Read
DescribeEndpoints	Grants permission to return the regional endpoint information			Read
DescribeExport	Grants permission to describe an existing Export of a table	export*		Read
DescribeGlobalTable	Grants permission to return information about the specified global table	global-table*		Read
DescribeGlobalTableSettings	Grants permission to return settings information about the specified global table	global-table*		Read
DescribeImport	Grants permission to describe an existing import	import*		Read
DescribeKinesisStreamingDestination	Grants permission to grant permission to describe the status of Kinesis streaming and related details for a given table	table*	aws:ResourceTag/${TagKey}	Read
DescribeLimits	Grants permission to return the current provisioned-capacity limits for your Amazon Web Services account in a region, both for the region as a whole and for any one DynamoDB table that you create there			Read
DescribeStream	Grants permission to return information about a stream, including the current status of the stream, its Amazon Resource Name (ARN), the composition of its shards, and its corresponding DynamoDB table	stream*		Read
DescribeTable	Grants permission to return information about the table	table*	aws:ResourceTag/${TagKey}	Read
DescribeTableReplicaAutoScaling	Grants permission to describe the auto scaling settings across all replicas of the global table	table*	aws:ResourceTag/${TagKey}	Read
DescribeTimeToLive	Grants permission to give a description of the Time to Live (TTL) status on the specified table	table*	aws:ResourceTag/${TagKey}	Read
DisableKinesisStreamingDestination	Grants permission to grant permission to stop replication from the DynamoDB table to the Kinesis data stream	table*	aws:ResourceTag/${TagKey}	Write
EnableKinesisStreamingDestination	Grants permission to grant permission to start table data replication to the specified Kinesis data stream at a timestamp chosen during the enable workflow	table*	aws:ResourceTag/${TagKey}	Write
ExportTableToPointInTime	Grants permission to initiate an Export of a DynamoDB table to S3	table*	aws:ResourceTag/${TagKey}	Write
GetItem	Grants permission to the GetItem operation that returns a set of attributes for the item with the given primary key	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:Select	Read
GetRecords	Grants permission to retrieve the stream records from a given shard	stream*		Read
GetResourcePolicy	Grants permission to view a resource-based policy for a resource	stream*		Read
GetResourcePolicy		table*	aws:ResourceTag/${TagKey}	Read
GetShardIterator	Grants permission to return a shard iterator	stream*		Read
ImportTable	Grants permission to initiate an import from S3 to a DynamoDB table	table*	aws:ResourceTag/${TagKey}	Write
ListBackups	Grants permission to list backups associated with the account and endpoint			List
ListContributorInsights	Grants permission to list the ContributorInsightsSummary for all tables and global secondary indexes associated with the current account and endpoint			List
ListExports	Grants permission to list exports associated with the account and endpoint	table	aws:ResourceTag/${TagKey}	List
ListGlobalTables	Grants permission to list all global tables that have a replica in the specified region			List
ListImports	Grants permission to list imports associated with the account and endpoint	table	aws:ResourceTag/${TagKey}	List
ListStreams	Grants permission to return an array of stream ARNs associated with the current account and endpoint			Read
ListTables	Grants permission to return an array of table names associated with the current account and endpoint			List
ListTagsOfResource	Grants permission to list all tags on an Amazon DynamoDB resource	stream		Read
ListTagsOfResource		table*	aws:ResourceTag/${TagKey}	Read
PartiQLDelete	Grants permission to delete a single item in a table by primary key	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:LeadingKeys dynamodb:ReturnValues	Write
PartiQLInsert	Grants permission to create a new item, if an item with same primary key does not exist in the table	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:LeadingKeys	Write
PartiQLSelect	Grants permission to read a set of attributes for items from a table or index	index	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:FullTableScan dynamodb:LeadingKeys dynamodb:Select	Read
PartiQLSelect		table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:FullTableScan dynamodb:LeadingKeys dynamodb:Select	Read
PartiQLUpdate	Grants permission to edit an existing item's attributes	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:LeadingKeys dynamodb:ReturnValues	Write
PutItem	Grants permission to create a new item, or replace an old item with a new item	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues	Write
PutResourcePolicy	Grants permission to attach a resource-based policy to the resource	stream*		Permissions management, Write
PutResourcePolicy		table*	aws:ResourceTag/${TagKey}	Permissions management, Write
Query	Grants permission to use the primary key of a table or a secondary index to directly access items from that table or index	index	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues dynamodb:Select	Read
Query		table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues dynamodb:Select	Read
RestoreTableFromBackup	Grants permission to create a new table from an existing backup	backup*		Write
RestoreTableFromBackup		table*	aws:ResourceTag/${TagKey}	Write
RestoreTableToPointInTime	Grants permission to restore a table to a point in time	table*	aws:ResourceTag/${TagKey}	Write
Scan	Grants permission to return one or more items and item attributes by accessing every item in a table or a secondary index	index	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues dynamodb:Select	Read
Scan		table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues dynamodb:Select	Read
TagResource	Grants permission to associate a set of tags with an Amazon DynamoDB resource	stream	aws:RequestTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource		table*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove the association of tags from an Amazon DynamoDB resource	stream	aws:TagKeys	Tagging, Write
UntagResource		table*	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateContinuousBackups	Grants permission to enable or disable continuous backups	table*	aws:ResourceTag/${TagKey}	Write
UpdateContributorInsights	Grants permission to update the status for contributor insights for a specific table or global secondary index	index	aws:ResourceTag/${TagKey}	Write
UpdateContributorInsights		table*	aws:ResourceTag/${TagKey}	Write
UpdateGlobalTable	Grants permission to add or remove replicas in the specified global table	global-table*		Write
UpdateGlobalTable		table*	aws:ResourceTag/${TagKey}	Write
UpdateGlobalTableSettings	Grants permission to update settings of the specified global table	global-table*		Write
UpdateGlobalTableSettings		table*	aws:ResourceTag/${TagKey}	Write
UpdateItem	Grants permission to edit an existing item's attributes, or adds a new item to the table if it does not already exist	table*	aws:ResourceTag/${TagKey} dynamodb:Attributes dynamodb:EnclosingOperation dynamodb:LeadingKeys dynamodb:ReturnConsumedCapacity dynamodb:ReturnValues	Write
UpdateKinesisStreamingDestination	Grants permission to update data replication configurations for the specified Kinesis data stream	table*	aws:ResourceTag/${TagKey}	Write
UpdateTable	Grants permission to modify the provisioned throughput settings, global secondary indexes, or DynamoDB Streams settings for a given table	table*	aws:ResourceTag/${TagKey}	Write
UpdateTableReplicaAutoScaling	Grants permission to update auto scaling settings on your replica table	table*	aws:ResourceTag/${TagKey}	Write
UpdateTimeToLive	Grants permission to enable or disable TTL for the specified table	table*	aws:ResourceTag/${TagKey}	Write

Permission-only actions for Amazon DynamoDB

The following actions are defined by Amazon DynamoDB but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AssociateTableReplica	Grants permission to create multi account global table replica	table*	aws:ResourceTag/${TagKey}	Write
CreateGlobalTableWitness	Grants permission to add a Witness to a Global Table	table*	aws:ResourceTag/${TagKey}	Write
CreateTableReplica	Grants permission to add a new replica table	table*	aws:ResourceTag/${TagKey}	Write
DeleteGlobalTableWitness	Grants permission to remove a Witness from a Global Table	table*	aws:ResourceTag/${TagKey}	Write
DeleteTableReplica	Grants permission to delete a replica table and all of its items	table*	aws:ResourceTag/${TagKey}	Write
DescribeReservedCapacity	Grants permission to describe one or more of the Reserved Capacity purchased			Read
DescribeReservedCapacityOfferings	Grants permission to describe Reserved Capacity offerings that are available for purchase			Read
GetAbacStatus	Grants permission to view the status of Attribute Based Access Control for the account			Read
InjectError	Grants permission to start experiments on a Global Table		dynamodb:FisActionId dynamodb:FisTargetArns	Write
PurchaseReservedCapacityOfferings	Grants permission to purchases reserved capacity for use with your account			Write
ReadDataForReplication	Grants permission to read data from a multi account global table replica	table*	aws:ResourceTag/${TagKey}	Read
ReplicateSettings	Grants permission to configure settings for a multi account global table replica	table*	aws:ResourceTag/${TagKey}	Write
RestoreTableFromAwsBackup	Grants permission to create a new table from recovery point on Amazon Backup	table*	aws:ResourceTag/${TagKey}	Write
StartAwsBackupJob	Grants permission to create a backup on Amazon Backup with advanced features enabled	table*	aws:ResourceTag/${TagKey}	Write
UpdateAbacStatus	Grants permission to update the status of Attribute Based Access Control for the account			Permissions management, Write
UpdateGlobalTableVersion	Grants permission to update version of the specified global table	global-table*		Write
UpdateGlobalTableVersion		table	aws:ResourceTag/${TagKey}	Write
WriteDataForReplication	Grants permission to write data to a multi account global table replica	table*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon DynamoDB

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
backup	arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/backup/${BackupName}
export	arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/export/${ExportName}
global-table	arn:${Partition}:dynamodb::${Account}:global-table/${GlobalTableName}
import	arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/import/${ImportName}
index	arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/index/${IndexName}	aws:ResourceTag/${TagKey}
stream	arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/stream/${StreamLabel}
table	arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}	aws:ResourceTag/${TagKey}

Condition keys for Amazon DynamoDB

Amazon DynamoDB defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString
dynamodb:Attributes	Filters access by attribute (field or column) names of the table	ArrayOfString
dynamodb:EnclosingOperation	Filters access by blocking Transactions APIs calls and allow the non-Transaction APIs calls and vice-versa	String
dynamodb:FirstPartitionKeyValues	Filters access by the first partition key of the table	ArrayOfString
dynamodb:FisActionId	Filters access by the ID of an Amazon FIS action	String
dynamodb:FisTargetArns	Filters access by the ARN of an Amazon FIS target	ArrayOfARN
dynamodb:FourthPartitionKeyValues	Filters access by the forth partition key of the table	ArrayOfString
dynamodb:FullTableScan	Filters access by blocking full table scan	Bool
dynamodb:LeadingKeys	Filters access by the first partition key of the table	ArrayOfString
dynamodb:ReturnConsumedCapacity	Filters access by the ReturnConsumedCapacity parameter of a request. Contains either "TOTAL" or "NONE"	String
dynamodb:ReturnValues	Filters access by the ReturnValues parameter of request. Contains one of the following: "ALL_OLD", "UPDATED_OLD","ALL_NEW","UPDATED_NEW", or "NONE"	String
dynamodb:SecondPartitionKeyValues	Filters access by the second partition key of the table	ArrayOfString
dynamodb:Select	Filters access by the Select parameter of a Query or Scan request	String
dynamodb:ThirdPartitionKeyValues	Filters access by the third partition key of the table	ArrayOfString

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon Data Lifecycle Manager (dlm)

Amazon DynamoDB Accelerator (DAX) (dax)