add scan permission for kv read

required to allow 'keys' method to scan for keys
nitrictech · Feb 27, 2024 · eda49f9 · eda49f9
1 parent 93534f7
commit eda49f9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cloud/aws/deploy/policy.go b/cloud/aws/deploy/policy.go
@@ -58,6 +58,7 @@ var awsActionsMap map[resourcespb.Action][]string = map[resourcespb.Action][]str
 	resourcespb.Action_KeyValueStoreRead: {
 		"dynamodb:GetItem",
 		"dynamodb:BatchGetItem",
+		"dynamodb:Scan", // required to scan keys
 	},
 	resourcespb.Action_KeyValueStoreWrite: {
 		"dynamodb:UpdateItem",