Status: IN
DynamoDB BPA only analyzes resource-based policies directly attached to DynamoDB resources — it does not cover identity-based policies or policies on associated resources like KMS keys.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-rbac-bpa-rbphtml.md