DynamoDB API operations supported by resource-based policies

This topic lists the API operations that are supported by resource-based policies. However, for cross-account access, you can only use a certain set of DynamoDB APIs through resource-based policies. You can't attach resource-based policies to resource types, such as backups and imports. The IAM actions, which correspond with the APIs operating on these resource types, are excluded from the supported IAM actions in resource-based policies. Because table administrators configure internal table settings within the same account, APIs, such as UpdateTimeToLive and DisableKinesisStreamingDestination, don't support cross-account access through resource-based policies.

The DynamoDB data plane and control plane APIs that support cross-account access also support table name overloading, which lets you specify the table ARN instead of the table name. You can specify table ARN in the TableName parameter of these APIs. However, not all of these APIs support cross-account access.

Data plane API operations

The following table lists the API-level support provided by data plane API operations for resource-based policies and cross-account access.

PartiQL API operations

The following table lists the API-level support provided by PartiQL API operations for resource-based policies and cross-account access.

Control plane API operations

The following table lists the API-level support provided by control plane API operations for resource-based policies and cross-account access.

Version 2019.11.21 (Current) global tables API operations

The following table lists the API-level support provided by Version 2019.11.21 (Current) global tables API operations for resource-based policies and cross-account access.

Version 2017.11.29 (Legacy) global tables API operations

The following table lists the API-level support provided by Version 2017.11.29 (Legacy) global tables API operations for resource-based policies and cross-account access.

Tags API operations

The following table lists the API-level support provided by API operations related to tags for resource-based policies and cross-account access.

Backup and Restore API operations

The following table lists the API-level support provided by API operations related to backup and restore for resource-based policies and cross-account access.

Continuous Backup/Restore (PITR) API operations

The following table lists the API-level support provided by API operations related to Continuous Backup/Restore (PITR) for resource-based policies and cross-account access.

Contributor Insights API operations

The following table lists the API-level support provided by API operations related to Continuous Backup/Restore (PITR) for resource-based policies and cross-account access.

Export API operations

The following table lists the API-level support provided by Export API operations for resource-based policies and cross-account access.

Import API operations

The following table lists the API-level support provided by Import API operations for resource-based policies and cross-account access.

Amazon Kinesis Data Streams API operations

The following table lists the API-level support provided by Kinesis Data Streams API operations for resource-based policies and cross-account access.

Resource-based policy API operations

The following table lists the API-level support provided by resource-based policy API operations for resource-based policies and cross-account access.

Time-to-Live API operations

The following table lists the API-level support provided by time to live (TTL) API operations for resource-based policies and cross-account access.

Other API operations

The following table lists the API-level support provided by other miscellaneous API operations for resource-based policies and cross-account access.

DynamoDB Streams API operations

The following table lists the API-level support of DynamoDB Streams APIs for resource-based policies and cross-account access.