Policy: AWSLambdaDynamoDBExecutionRole ARN: arn:aws:iam::aws:policy/service-role/AWSLambdaDynamoDBExecutionRole Allowed Actions Actions Services dynamodb:DescribeStream dynamodb dynamodb:GetRecords dynamodb dynamodb:GetShardIterator dynamodb dynamodb:ListStreams dynamodb logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs