title: IAM policy to allow access to DynamoDB console for specific tables
body: <p>Is it possible to create an AWS IAM policy that provides access to the DynamoDB console only for specific tables? I have tried:</p>
  <pre class="lang-json prettyprint-override"><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Sid&quot;: &quot;Stmt0000000001&quot;,
              &quot;Action&quot;: [
                  &quot;dynamodb:DescribeTable&quot;,
                  &quot;dynamodb:ListTables&quot;,
                  &lt;other actions&gt;
              ], 
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Resource&quot;: [
                  &quot;arn:aws:dynamodb:&lt;region&gt;:&lt;account&gt;:table/FooTable&quot;,
                  &quot;arn:aws:dynamodb:&lt;region&gt;:&lt;account&gt;:table/BarTable&quot;
              ]
          }
      ]
  }
  </code></pre>
  <p>but for a user with this policy attached, the DynamoDB tables list says <code>Not Authorized</code> (as it does when no policy is attached).</p>
  <p>Setting <code>&quot;Resource&quot;</code> to <code>&quot;*&quot;</code> and adding a new statement like below lets the user perform <code>&lt;other actions&gt;</code> on <code>FooTable</code> and <code>BarTable</code>, but they can also see all other tables in the tables list.</p>
  <pre class="lang-json prettyprint-override"><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Sid&quot;: &quot;Stmt0000000001&quot;,
              &quot;Action&quot;: [
                  &lt;other actions&gt;
              ], 
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Resource&quot;: [
                  &quot;arn:aws:dynamodb:&lt;region&gt;:&lt;account&gt;:table/FooTable&quot;,
                  &quot;arn:aws:dynamodb:&lt;region&gt;:&lt;account&gt;:table/BarTable&quot;
              ]
          },
          {
              &quot;Sid&quot;: &quot;Stmt0000000002&quot;,
              &quot;Action&quot;: [
                  &quot;dynamodb:DescribeTable&quot;,
                  &quot;dynamodb:ListTables&quot;
              ],
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Resource&quot;: &quot;*&quot;
          }
      ]
  }
  
  </code></pre>