DynamoDB Cloudformation 权限

Question

我目前有以下 cloudformation .yaml 文件：

Resources:
  DynamoTable:
  Type: "AWS::DynamoDB::Table"
  Properties:
    ...
    ...
    ...

如何授予其他资源查询该表的权限？

Answer 1

Resources:
  Service:
    Type: "AWS::CloudFormation::Stack"
    Properties:
      Parameters:
        ...
        ...
        TaskPolicyArn: !Ref ThisServicePolicy

  DynamoTable:
    Type: "AWS::DynamoDB::Table"
    Properties:
      AttributeDefinitions:
        ...
        ...
        ...

  ThisServicePolicy:
    Type: "AWS::IAM::ManagedPolicy"
    Properties:
      ManagedPolicyName: SomePolicyName
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: "Allow"
            Action: 
              - "dynamodb:GetItem"
              - "dynamodb:BatchGetItem"
              - "dynamodb:Query"
            Resource: "*"