title: How to give access to a DynamoDB table?
body: <p>In IAM I tried creating the following policy for a user (account id in arn obfuscated):</p>
  
  <pre><code>{
   "Version": "2012-10-17",
   "Statement": [
      {
          "Sid": "VisualEditor0",
          "Effect": "Allow",
          "Action": "dynamodb:*",
          "Resource": "arn:aws:dynamodb:us-west-2:999999999999:table/busUsers"
      }
   ]
  }
  </code></pre>
  
  <p>However, it resulted in:</p>
  
  <blockquote>
    <p>This policy defines some actions, resources, or conditions that do not provide permissions. To grant access, policies must have an action that has an applicable resource or condition. For details, choose Show remaining <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_policies.html?icmpid=docs_iam_console#policy-summary-not-grant-permissions" rel="noreferrer">Learn more</a></p>
  </blockquote>
  
  <p><code>Show remaining</code> shows:</p>
  
  <blockquote>
    <p>One or more actions do not have an applicable resource.</p>
  </blockquote>
  
  <p>I looked up the <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_policies.html?icmpid=docs_iam_console#policy-summary-not-grant-permissions" rel="noreferrer">Learn more</a> link and it says to replace the arn in the <code>Resource</code> element with <code>*</code>. I am confused now. What does <code>*</code> mean? I want to grant access to a specific DynamoDB table of mine. How do I specify that?</p>
  
  <hr>
  
  <p>EDIT: I removed all DyanamoDB actions and just selected one <code>GetItem</code> and it's:
  <a href="https://i.stack.imgur.com/Uf5pA.png" rel="noreferrer"><img src="https://i.stack.imgur.com/Uf5pA.png" alt="enter image description here"></a></p>
  
  <p>When I deselect <code>GetItem</code>, both error messages go away.
  When I select <strong>table</strong> Any, the first error message goes away.
  When I select <strong>Resource</strong> Any, the second error message goes away.</p>