DynamoDB Streams Gets Tag-Based Access Control
Amazon DynamoDB Streams now supports attribute-based access control (ABAC), letting you manage stream permissions using IAM policies tied to tags instead of creating tons of individual policies. You can attach up to 50 tags per stream and use them to grant or deny access—perfect for teams juggling multiple apps and environments across all commercial AWS Regions and GovCloud.
source: [aws/whats-new]