Your Policy does not allow Delete, DeleteItem needed for CRUD

Better Policy info. Note user should enter their region and account

{

"Version": "2012-10-17",

"Statement": [

{

"Sid": "VisualEditor0",

"Effect": "Allow",

"Action": [

"dynamodb:BatchGetItem",

"logs:CreateLogStream",

"dynamodb:BatchWriteItem",

"dynamodb:PutItem",

"dynamodb:GetItem",

"dynamodb:DeleteItem",

"dynamodb:Scan",

"dynamodb:Query",

"dynamodb:UpdateItem",

"logs:CreateLogGroup"

],

"Resource": [

"arn:aws:logs:<your region>:<your account num>:log-group:*",

"arn:aws:dynamodb:<your region>:<your account num>:table/products"

]

},

{

"Sid": "VisualEditor1",

"Effect": "Allow",

"Action": "logs:PutLogEvents",

"Resource": "arn:aws:logs:<your region>:<your account num>:log-group:*:log-stream:*"

}

]

}

gravity well (Rob Tomlin)
gravity well (Rob Tomlin)

Written by gravity well (Rob Tomlin)

Software Engineering Manager. Explorer, learner, teacher, and more

No responses yet