Status: IN
The `dynamodb:Attributes` IAM condition key evaluates only request parameters (e.g., ProjectionExpression), not response attributes — omitting ProjectionExpression returns all attributes regardless of the policy.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-specifying-conditionshtml.md