feat: dynamodb update table iam policy

Author: Alanfb

lib/deploy/stepFunctions/compileIamRole.js

@@ -433,6 +433,8 @@ function getIamPermissions(taskStates) {
         return getDynamoDBPermissions('dynamodb:GetItem', state);
       case 'arn:aws:states:::dynamodb:deleteItem':
         return getDynamoDBPermissions('dynamodb:DeleteItem', state);
+      case 'arn:aws:states:::aws-sdk:dynamodb:updateTable':
+        return getDynamoDBPermissions('dynamodb:UpdateTable', state);
 
       case 'arn:aws:states:::batch:submitJob.sync':
       case 'arn:aws:states:::batch:submitJob':

lib/deploy/stepFunctions/compileIamRole.test.js

@@ -549,10 +549,17 @@ describe('#compileIamRole', () => {
             },
             End: true,
           },
+          E: {
+            Type: 'Task',
+            Resource: 'arn:aws:states:::aws-sdk:dynamodb:updateTable',
+            Parameters: {
+              TableName: tableName,
+            },
+            End: true,
+          },
         },
       },
     });
-
     serverless.service.stepFunctions = {
       stateMachines: {
         myStateMachine1: genStateMachine('StateMachine1', helloTable, ['arn:aws:states:::dynamodb:updateItem', 'arn:aws:states:::dynamodb:putItem']),
@@ -577,6 +584,7 @@ describe('#compileIamRole', () => {
           'dynamodb:PutItem',
           'dynamodb:GetItem',
           'dynamodb:DeleteItem',
+          'dynamodb:UpdateTable',
         ]);
     });