| dynamodb:BatchGetItem | ReadOnly |
| dynamodb:ConditionCheckItem | ReadOnly |
| dynamodb:GetItem | ReadOnly |
| dynamodb:GetRecords | ReadOnly |
| dynamodb:GetShardIterator | ReadOnly |
| dynamodb:Query | ReadOnly |
| dynamodb:Scan | ReadOnly |
| cloudwatch:DescribeAlarms | Metadata |
| cloudwatch:GetMetricStatistics | Metadata |
| dynamodb:DescribeBackup | Metadata |
| dynamodb:DescribeContinuousBackups | Metadata |
| dynamodb:DescribeContributorInsights | Metadata |
| dynamodb:DescribeEndpoints | Metadata |
| dynamodb:DescribeExport | Metadata |
| dynamodb:DescribeGlobalTable | Metadata |
| dynamodb:DescribeGlobalTableSettings | Metadata |
| dynamodb:DescribeImport | Metadata |
| dynamodb:DescribeKinesisStreamingDestination | Metadata |
| dynamodb:DescribeLimits | Metadata |
| dynamodb:DescribeReservedCapacity | Metadata |
| dynamodb:DescribeReservedCapacityOfferings | Metadata |
| dynamodb:DescribeStream | Metadata |
| dynamodb:DescribeTable | Metadata |
| dynamodb:DescribeTableReplicaAutoScaling | Metadata |
| dynamodb:DescribeTimeToLive | Metadata |
| dynamodb:GetResourcePolicy | Metadata |
| dynamodb:ListBackups | Metadata |
| dynamodb:ListContributorInsights | Metadata |
| dynamodb:ListExports | Metadata |
| dynamodb:ListGlobalTables | Metadata |
| dynamodb:ListImports | Metadata |
| dynamodb:ListStreams | Metadata |
| dynamodb:ListTables | Metadata |
| dynamodb:ListTagsOfResource | Metadata |
| dynamodb:PartiQLSelect | Metadata |
| dynamodb:TransactGetItems | Metadata |
