@cloud-copilot/iam-data 0.0.1

package/data/actions/dynamodb.json

@@ -0,0 +1,1124 @@
+{
+  "BatchGetItem": {
+    "name": "BatchGetItem",
+    "description": "Grants permission to return the attributes of one or more items from one or more tables",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:Select"
+    ],
+    "dependentActions": []
+  },
+  "BatchWriteItem": {
+    "name": "BatchWriteItem",
+    "description": "Grants permission to put or delete multiple items in one or more tables",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity"
+    ],
+    "dependentActions": []
+  },
+  "ConditionCheckItem": {
+    "name": "ConditionCheckItem",
+    "description": "Grants permission to the ConditionCheckItem operation checks the existence of a set of attributes for the item with the given primary key",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:ReturnValues"
+    ],
+    "dependentActions": []
+  },
+  "CreateBackup": {
+    "name": "CreateBackup",
+    "description": "Grants permission to create a backup for an existing table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateGlobalTable": {
+    "name": "CreateGlobalTable",
+    "description": "Grants permission to create a global table from an existing table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateTable": {
+    "name": "CreateTable",
+    "description": "Grants permission to the CreateTable operation adds a new table to your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateTableReplica": {
+    "name": "CreateTableReplica",
+    "isPermissionOnly": true,
+    "description": "Grants permission to add a new replica table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteBackup": {
+    "name": "DeleteBackup",
+    "description": "Grants permission to delete an existing backup of a table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteItem": {
+    "name": "DeleteItem",
+    "description": "Grants permission to deletes a single item in a table by primary key",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:ReturnValues"
+    ],
+    "dependentActions": []
+  },
+  "DeleteResourcePolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete the resource-based policy attached to the resource",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteTable": {
+    "name": "DeleteTable",
+    "description": "Grants permission to the DeleteTable operation which deletes a table and all of its items",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteTableReplica": {
+    "name": "DeleteTableReplica",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete a replica table and all of its items",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeBackup": {
+    "name": "DescribeBackup",
+    "description": "Grants permission to describe an existing backup of a table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeContinuousBackups": {
+    "name": "DescribeContinuousBackups",
+    "description": "Grants permission to check the status of the backup restore settings on the specified table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeContributorInsights": {
+    "name": "DescribeContributorInsights",
+    "description": "Grants permission to describe the contributor insights status and related details for a given table or global secondary index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "index",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeEndpoints": {
+    "name": "DescribeEndpoints",
+    "description": "Grants permission to return the regional endpoint information",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeExport": {
+    "name": "DescribeExport",
+    "description": "Grants permission to describe an existing Export of a table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "export",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeGlobalTable": {
+    "name": "DescribeGlobalTable",
+    "description": "Grants permission to return information about the specified global table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "global-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeGlobalTableSettings": {
+    "name": "DescribeGlobalTableSettings",
+    "description": "Grants permission to return settings information about the specified global table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "global-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeImport": {
+    "name": "DescribeImport",
+    "description": "Grants permission to describe an existing import",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "import",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeKinesisStreamingDestination": {
+    "name": "DescribeKinesisStreamingDestination",
+    "description": "Grants permission to grant permission to describe the status of Kinesis streaming and related details for a given table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeLimits": {
+    "name": "DescribeLimits",
+    "description": "Grants permission to return the current provisioned-capacity limits for your AWS account in a region, both for the region as a whole and for any one DynamoDB table that you create there",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeReservedCapacity": {
+    "name": "DescribeReservedCapacity",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe one or more of the Reserved Capacity purchased",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeReservedCapacityOfferings": {
+    "name": "DescribeReservedCapacityOfferings",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe Reserved Capacity offerings that are available for purchase",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeStream": {
+    "name": "DescribeStream",
+    "description": "Grants permission to return information about a stream, including the current status of the stream, its Amazon Resource Name (ARN), the composition of its shards, and its corresponding DynamoDB table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeTable": {
+    "name": "DescribeTable",
+    "description": "Grants permission to return information about the table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeTableReplicaAutoScaling": {
+    "name": "DescribeTableReplicaAutoScaling",
+    "description": "Grants permission to describe the auto scaling settings across all replicas of the global table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeTimeToLive": {
+    "name": "DescribeTimeToLive",
+    "description": "Grants permission to give a description of the Time to Live (TTL) status on the specified table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DisableKinesisStreamingDestination": {
+    "name": "DisableKinesisStreamingDestination",
+    "description": "Grants permission to grant permission to stop replication from the DynamoDB table to the Kinesis data stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "EnableKinesisStreamingDestination": {
+    "name": "EnableKinesisStreamingDestination",
+    "description": "Grants permission to grant permission to start table data replication to the specified Kinesis data stream at a timestamp chosen during the enable workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ExportTableToPointInTime": {
+    "name": "ExportTableToPointInTime",
+    "description": "Grants permission to initiate an Export of a DynamoDB table to S3",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetItem": {
+    "name": "GetItem",
+    "description": "Grants permission to the GetItem operation that returns a set of attributes for the item with the given primary key",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:Select"
+    ],
+    "dependentActions": []
+  },
+  "GetRecords": {
+    "name": "GetRecords",
+    "description": "Grants permission to retrieve the stream records from a given shard",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetResourcePolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to view a resource-based policy for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetShardIterator": {
+    "name": "GetShardIterator",
+    "description": "Grants permission to return a shard iterator",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ImportTable": {
+    "name": "ImportTable",
+    "description": "Grants permission to initiate an import from S3 to a DynamoDB table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListBackups": {
+    "name": "ListBackups",
+    "description": "Grants permission to list backups associated with the account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListContributorInsights": {
+    "name": "ListContributorInsights",
+    "description": "Grants permission to list the ContributorInsightsSummary for all tables and global secondary indexes associated with the current account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListExports": {
+    "name": "ListExports",
+    "description": "Grants permission to list exports associated with the account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListGlobalTables": {
+    "name": "ListGlobalTables",
+    "description": "Grants permission to list all global tables that have a replica in the specified region",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListImports": {
+    "name": "ListImports",
+    "description": "Grants permission to list imports associated with the account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListStreams": {
+    "name": "ListStreams",
+    "description": "Grants permission to return an array of stream ARNs associated with the current account and endpoint",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTables": {
+    "name": "ListTables",
+    "description": "Grants permission to return an array of table names associated with the current account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTagsOfResource": {
+    "name": "ListTagsOfResource",
+    "description": "Grants permission to list all tags on an Amazon DynamoDB resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "PartiQLDelete": {
+    "name": "PartiQLDelete",
+    "description": "Grants permission to delete a single item in a table by primary key",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnValues"
+    ],
+    "dependentActions": []
+  },
+  "PartiQLInsert": {
+    "name": "PartiQLInsert",
+    "description": "Grants permission to create a new item, if an item with same primary key does not exist in the table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:LeadingKeys"
+    ],
+    "dependentActions": []
+  },
+  "PartiQLSelect": {
+    "name": "PartiQLSelect",
+    "description": "Grants permission to read a set of attributes for items from a table or index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "index",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:FullTableScan",
+      "dynamodb:LeadingKeys",
+      "dynamodb:Select"
+    ],
+    "dependentActions": []
+  },
+  "PartiQLUpdate": {
+    "name": "PartiQLUpdate",
+    "description": "Grants permission to edit an existing item's attributes",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnValues"
+    ],
+    "dependentActions": []
+  },
+  "PurchaseReservedCapacityOfferings": {
+    "name": "PurchaseReservedCapacityOfferings",
+    "isPermissionOnly": true,
+    "description": "Grants permission to purchases reserved capacity for use with your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "PutItem": {
+    "name": "PutItem",
+    "description": "Grants permission to create a new item, or replace an old item with a new item",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:ReturnValues"
+    ],
+    "dependentActions": []
+  },
+  "PutResourcePolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to attach a resource-based policy to the resource",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "Query": {
+    "name": "Query",
+    "description": "Grants permission to use the primary key of a table or a secondary index to directly access items from that table or index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "index",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:ReturnValues",
+      "dynamodb:Select"
+    ],
+    "dependentActions": []
+  },
+  "RestoreTableFromAwsBackup": {
+    "name": "RestoreTableFromAwsBackup",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a new table from recovery point on AWS Backup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RestoreTableFromBackup": {
+    "name": "RestoreTableFromBackup",
+    "description": "Grants permission to create a new table from an existing backup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "dynamodb:BatchWriteItem",
+          "dynamodb:DeleteItem",
+          "dynamodb:GetItem",
+          "dynamodb:PutItem",
+          "dynamodb:Query",
+          "dynamodb:Scan",
+          "dynamodb:UpdateItem"
+        ]
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RestoreTableToPointInTime": {
+    "name": "RestoreTableToPointInTime",
+    "description": "Grants permission to restore a table to a point in time",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "dynamodb:BatchWriteItem",
+      "dynamodb:DeleteItem",
+      "dynamodb:GetItem",
+      "dynamodb:PutItem",
+      "dynamodb:Query",
+      "dynamodb:Scan",
+      "dynamodb:UpdateItem"
+    ]
+  },
+  "Scan": {
+    "name": "Scan",
+    "description": "Grants permission to return one or more items and item attributes by accessing every item in a table or a secondary index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "index",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:ReturnValues",
+      "dynamodb:Select"
+    ],
+    "dependentActions": []
+  },
+  "StartAwsBackupJob": {
+    "name": "StartAwsBackupJob",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a backup on AWS Backup with advanced features enabled",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "TagResource": {
+    "name": "TagResource",
+    "description": "Grants permission to associate a set of tags with an Amazon DynamoDB resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UntagResource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove the association of tags from an Amazon DynamoDB resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateContinuousBackups": {
+    "name": "UpdateContinuousBackups",
+    "description": "Grants permission to enable or disable continuous backups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateContributorInsights": {
+    "name": "UpdateContributorInsights",
+    "description": "Grants permission to update the status for contributor insights for a specific table or global secondary index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "index",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateGlobalTable": {
+    "name": "UpdateGlobalTable",
+    "description": "Grants permission to add or remove replicas in the specified global table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateGlobalTableSettings": {
+    "name": "UpdateGlobalTableSettings",
+    "description": "Grants permission to update settings of the specified global table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateGlobalTableVersion": {
+    "name": "UpdateGlobalTableVersion",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update version of the specified global table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateItem": {
+    "name": "UpdateItem",
+    "description": "Grants permission to edit an existing item's attributes, or adds a new item to the table if it does not already exist",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "dynamodb:Attributes",
+      "dynamodb:EnclosingOperation",
+      "dynamodb:LeadingKeys",
+      "dynamodb:ReturnConsumedCapacity",
+      "dynamodb:ReturnValues"
+    ],
+    "dependentActions": []
+  },
+  "UpdateKinesisStreamingDestination": {
+    "name": "UpdateKinesisStreamingDestination",
+    "description": "Grants permission to update data replication configurations for the specified Kinesis data stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateTable": {
+    "name": "UpdateTable",
+    "description": "Grants permission to modify the provisioned throughput settings, global secondary indexes, or DynamoDB Streams settings for a given table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateTableReplicaAutoScaling": {
+    "name": "UpdateTableReplicaAutoScaling",
+    "description": "Grants permission to update auto scaling settings on your replica table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateTimeToLive": {
+    "name": "UpdateTimeToLive",
+    "description": "Grants permission to enable or disable TTL for the specified table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}