example.tf

provider "aws" {
  version = "~> 2.0"
  region  = "us-east-1"
}

resource "aws_dynamodb_table" "example-terraform" {
  name           = "TerraformExample"
  billing_mode   = "PROVISIONED"
  read_capacity  = 20
  write_capacity = 20
  hash_key       = "id"

  attribute {
    name = "id"
    type = "S"
  }

  tags = {
    Delete = "true"
  }
}

resource "aws_iam_user" "terraform-example-service-user" {
  name = "terraform-example-service-user"
}

resource "aws_iam_access_key" "access_key" {
  user = "${aws_iam_user.terraform-example-service-user.name}"
}

resource "aws_iam_user_policy" "example-terraform-service-policy" {
  name   = "example-terraform-service-user-policy"
  user   = "${aws_iam_user.terraform-example-service-user.name}"
  policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Action": [
              "dynamodb:BatchGetItem",
              "dynamodb:BatchWriteItem",
              "dynamodb:ConditionCheckItem",
              "dynamodb:PutItem",
              "dynamodb:UntagResource",
              "dynamodb:DeleteItem",
              "dynamodb:ListTagsOfResource",
              "dynamodb:Scan",
              "dynamodb:Query",
              "dynamodb:UpdateItem",
              "dynamodb:DescribeTimeToLive",
              "dynamodb:TagResource",
              "dynamodb:DescribeTable",
              "dynamodb:GetItem"
          ],
          "Effect": "Allow",
          "Resource": "${aws_dynamodb_table.example-terraform.arn}"
      }
  ]
}
  EOF
}