Status: IN
`ListStreams` is the only DynamoDB Streams API that does not support resource-based policies; the other three (`DescribeStream`, `GetRecords`, `GetShardIterator`) support both resource-based policies and cross-account access.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-rbac-iam-actionshtml.md