String transform

transform.yaml

  - base:
      apiVersion: identity.aws.crossplane.io/v1alpha1
      kind: IAMPolicy
      spec:
        forProvider:
          description: "policy to access dynamodb table."
    patches:
      - type: PatchSet
        patchSetName: Metadata
      - fromFieldPath: "metadata.name"
        toFieldPath: "spec.forProvider.name"
      - fromFieldPath: "spec.tableName"  # Change as needed.
        toFieldPath: "spec.forProvider.document"
        transforms:
        # Note the '%s' string format verb gets replaced with the
        # content of spec.tableName (i.e. the fromFieldPath).
        - type: string
          string:
            fmt: |
              {
                "Version": "2012-10-17",
                "Statement": [
                  {
                    "Action": [
                      "dynamodb:DescribeTable",
                      "dynamodb:Get*",
                      "dynamodb:PutItem"
                    ],
                    "Resource":  [
                      "arn:aws:dynamodb:*:*:table/%s*"
                    ],
                    "Effect": "Allow"
                  }
                ]
              }