Editorial question125.4K views658 votes0 answers2,373 following
AI-generatedDynamoDB resource-based policy: wildcard Principal with Condition keys – precedence uncertainty
Background \n In DynamoDB, resource-based policies allow direct table permissions. A common pattern is to set Principal: "*" and then constrain access with a Condition such as aws:PrincipalOrgID . AWS evaluation states that an explicit Denys in any policy overrides an Allow . However, when a resource-based policy uses a wildcard Principal with a Condition th
dynamodb