IAM

resource "aws_iam_role" "dynamodb" { name = "dynamodb-role" assume_role_policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = "sts:AssumeRole" Effect = "Allow" Sid = "" Principal = { Service = "apigateway.amazonaws.com" } } ] }) managed_policy_arns = ["arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess"] }