Status: IN
Cross-account Lambda triggers on DynamoDB Streams require four stream actions in the resource-based policy: `DescribeStream`, `GetRecords`, `GetShardIterator`, and `ListShards`.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-rbac-cross-account-accesshtml.md