{"id":"dynamodb-bpa-does-not-cover-identity-policies","text":"DynamoDB BPA only analyzes resource-based policies directly attached to DynamoDB resources — it does not cover identity-based policies or policies on associated resources like KMS keys.","truth_value":"IN","source":"entries/2026/03/11/amazondynamodb-latest-developerguide-rbac-bpa-rbphtml.md","source_url":"","source_hash":"975fa22b535dfcd4","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"dynamodb-bpa-does-not-cover-identity-policies","truth_value":"IN","reason":"premise"}]}}