Your Policy does not allow Delete, DeleteItem needed for CRUD
Better Policy info. Note user should enter their region and account
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"dynamodb:BatchGetItem",
"logs:CreateLogStream",
"dynamodb:BatchWriteItem",
"dynamodb:PutItem",
"dynamodb:GetItem",
"dynamodb:DeleteItem",
"dynamodb:Scan",
"dynamodb:Query",
"dynamodb:UpdateItem",
"logs:CreateLogGroup"
],
"Resource": [
"arn:aws:logs:<your region>:<your account num>:log-group:*",
"arn:aws:dynamodb:<your region>:<your account num>:table/products"
]
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": "logs:PutLogEvents",
"Resource": "arn:aws:logs:<your region>:<your account num>:log-group:*:log-stream:*"
}
]
}