Merge branch 'main' into fix-dynamo-grants · aws/aws-cdk@6fd29d4 · GitHub

GitHub Actions / Security Guardian Results failed Mar 28, 2026 in 0s

48 tests run, 47 passed, 0 skipped, 1 failed.

Annotations

Check failure on line 1 in packages/@aws-cdk-testing/framework-integ/test/aws-dynamodb/test/integ.dynamodb.grant-service-principal.js.snapshot/grant-service-principal-test-stack.template.json

github-actions / Security Guardian Results

resource-policy-root-principal-needs-conditions.guard

RESOURCE_POLICY_ROOT_PRINCIPAL_NEEDS_CONDITIONS for Type: Static

Raw output


            Check was not compliant as property [Statement[*]] is missing. Value traversed to [Path=/Resources/TableCD117FA1/Properties/ResourcePolicy[L:21,C:22] Value={"PolicyDocument":{"Statement":[{"Action":["dynamodb:BatchGetItem","dynamodb:BatchWriteItem","dynamodb:ConditionCheckItem","dynamodb:DeleteItem","dynamodb:DescribeTable","dynamodb:GetItem","dynamodb:PutItem","dynamodb:Query","dynamodb:Scan","dynamodb:UpdateItem"],"Effect":"Allow","Principal":{"Service":["glue.amazonaws.com","redshift.amazonaws.com","replication.dynamodb.amazonaws.com"]},"Resource":"*"}],"Version":"2012-10-17"}}]

View more details on GitHub Actions

⚡