Permissions for @turbot/aws-dynamodb
Taking a look at permissions and associated grant levels for each permission for DynamoDB:
Permission | Grant Level | Help |
---|---|---|
application-autoscaling:DeregisterScalableTarget | None | |
application-autoscaling:RegisterScalableTarget | None | |
cloudwatch:DescribeAlarms | Metadata | For console access. |
cloudwatch:GetMetricStatistics | Metadata | For console access. |
dynamodb:BatchExecuteStatement | Operator | |
dynamodb:BatchGetItem | ReadOnly | |
dynamodb:BatchWriteItem | Operator | |
dynamodb:ConditionCheckItem | ReadOnly | |
dynamodb:CreateBackup | Admin | Admin can create and delete backup. |
dynamodb:CreateGlobalTable | Admin | Admin can create and update global table. |
dynamodb:CreateTable | Admin | |
dynamodb:CreateTableReplica | Admin | |
dynamodb:DeleteBackup | Admin | Admin can create and delete backup. |
dynamodb:DeleteItem | Operator | |
dynamodb:DeleteTable | Admin | |
dynamodb:DeleteTableReplica | Admin | |
dynamodb:DescribeBackup | Metadata | |
dynamodb:DescribeContinuousBackups | Metadata | |
dynamodb:DescribeContributorInsights | Metadata | |
dynamodb:DescribeEndpoints | Metadata | |
dynamodb:DescribeExport | Metadata | |
dynamodb:DescribeGlobalTable | Metadata | |
dynamodb:DescribeGlobalTableSettings | Metadata | |
dynamodb:DescribeKinesisStreamingDestination | Metadata | |
dynamodb:DescribeLimits | Metadata | |
dynamodb:DescribeReservedCapacity | Metadata | See http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/UsingIAMWithDDB.html#UsingWithActions |
dynamodb:DescribeReservedCapacityOfferings | Metadata | See http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/UsingIAMWithDDB.html#UsingWithActions |
dynamodb:DescribeStream | Metadata | |
dynamodb:DescribeTable | Metadata | |
dynamodb:DescribeTableReplicaAutoScaling | Metadata | |
dynamodb:DescribeTimeToLive | Metadata | |
dynamodb:DisableKinesisStreamingDestination | Admin | |
dynamodb:EnableKinesisStreamingDestination | Admin | |
dynamodb:ExecuteStatement | Admin | |
dynamodb:ExecuteTransaction | Admin | |
dynamodb:ExportTableToPointInTime | Admin | |
dynamodb:GetItem | ReadOnly | |
dynamodb:GetRecords | ReadOnly | |
dynamodb:GetShardIterator | ReadOnly | GetShardIterator only makes sense with calls to GetRecords. |
dynamodb:ListBackups | Metadata | |
dynamodb:ListContributorInsights | Metadata | |
dynamodb:ListExports | Metadata | |
dynamodb:ListGlobalTables | Metadata | |
dynamodb:ListStreams | Metadata | |
dynamodb:ListTables | Metadata | |
dynamodb:ListTagsOfResource | Metadata | |
dynamodb:PartiQLDelete | Admin | |
dynamodb:PartiQLInsert | Admin | |
dynamodb:PartiQLSelect | Metadata | |
dynamodb:PartiQLUpdate | Admin | |
dynamodb:PurchaseReservedCapacityOfferings | Owner | See http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/UsingIAMWithDDB.html#UsingWithActions |
dynamodb:PutItem | Operator | |
dynamodb:RestoreTableFromAwsBackup | Admin | |
dynamodb:StartAwsBackupJob | Admin | |
dynamodb:Query | ReadOnly | |
dynamodb:RestoreTableFromBackup | Admin | |
dynamodb:RestoreTableToPointInTime | Admin | Admin can restore the specified table to the specified point in time within EarliestRestorableDateTime and LatestRestorableDateTime. |
dynamodb:Scan | ReadOnly | |
dynamodb:TagResource | Operator | Operators can manage tags. |
dynamodb:TransactGetItems | Metadata | |
dynamodb:TransactWriteItems | Admin | |
dynamodb:UntagResource | Operator | Operators can manage tags. |
dynamodb:UpdateContinuousBackups | Admin | |
dynamodb:UpdateContributorInsights | Admin | |
dynamodb:UpdateGlobalTable | Admin | Admin can create and update global table. |
dynamodb:UpdateGlobalTableSettings | Admin | |
dynamodb:UpdateItem | Operator | |
dynamodb:UpdateTable | Admin | |
dynamodb:UpdateTableReplicaAutoScaling | Admin | |
dynamodb:UpdateTimeToLive | Admin |