granting_dynamodb_access.md

Granting DynamoDB access to an IAM user

To grant DynamoDB access (or any other AWS service) to an IAM account, a security policy must be applied. This requires logging in with the root account, or an IAM user with permission to manage other IAM user access.

1. Log in to the AWS Console at https://console.aws.amazon.com/
2. Go to the IAM service dashboard: https://console.aws.amazon.com/iam/home?#/home
3. Under IAM Resources, click Users: [n]
4. In the list of users, find and select my account, then click it
5. Click the Add Permissions button
6. Leave 'Add user to groupselected, click theCreate Group` button
7. Give the group a name (anything, but I like "DynamoDBBosses", then in the Filter policies box enter DynamoDB
8. Click the select box next to the policy AmazonDynamoDBFullAccess, then click the Create Group button
9. Click the Next: Review button
10. Click the Add permissions button

At this point, my user is added to a group that grants full to DynamoDB. You may want to do the same for your IAM user, if you have one set up (the root account has access to everything, but Amazon recommends using an IAM account for day to day access to AWS).