aws-samples/amazon-dynamodb-labs

Ex8 Step2 IAM policy should have a resource restriction for the DYnamoDB table

switch180 opened this issue · 1 comments

switch180 commented

https://github.com/aws-samples/amazon-dynamodb-labs/blob/master/content/design-patterns/ex8streams/Step2.en.md

The Lambda function can put and delete items only in the logfile_replica table.

However, the IAM policy has Resource:"*". We should change this IAM policy to actually restrict access to only 1 table.

switch180 commented

Fixed in f8bae8d